28507 matches found
CVE-2012-3337
CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBMâs advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...
CVE-2012-3336
The CVE-2012-3336 entry concerns IBM InfoSphere Guardium 8.0, 8.01, and 8.2. The vulnerability is a SQL injection in multiple Guardium scripts. A remote authenticated attacker could send specially-crafted SQL statements to these scripts, allowing view, addition, modification, or deletion of data ...
MaraCMS Arbitrary PHP File Upload
This module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior in order to execute arbitrary commands. The module first attempts to authenticate to MaraCMS. It then tries to upload a malicious PHP file to the web root via an HTTP POST request to codebase/handler.php. If the...
EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2020-1889)
According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...
CVE-2012-2201
CVE-2012-2201 affects IBM WebSphere MQ 7.1. The DoS arises from an error when handling user IDs, enabling a remote attacker to bypass security configuration on a SVRCONN channel and flood the queue manager. Connected sources confirm the vulnerability in WebSphere MQ 7.1 and describe denial-of-ser...
CVE-2012-2160
CVE-2012-2160 affects IBM Rational Change 5.3. The vulnerability arises from improper validation of user-supplied input, enabling a cross-site scripting attack via the SUPP_TEMPLATE_FLAG URL parameter. When a victim clicks a specially crafted link, an attacker could execute script in the browser ...
CVE-2012-2160
IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPPTEMPLATEFLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security...
Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal
Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal Date: 2020-08-22 Exploit Author: LiquidWorm Vendor Homepage: http://www.eibiz.co.th Affected version: =3.8.0 CVE: N/A Eibiz i-Media Server Digital Signage 3.8.0 oldfile File Path Traversal Vendor: EIBIZ Co.,Ltd. Produ...
Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2
Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities. Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws reside in the Remote Access Service RAS in a way i...
KB4578013: Windows 8.1 and Windows Server 2012 R2 August 2020 Additional Security Update
The remote Windows host is missing security update 4578013. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory. CVE-2020-1530 - An elevation of privilege vulnerability exists when the Windo...
QiHang Media Web Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability
Exploit for hardware platform in category web applications QiHang Media Web QH.aspx Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected...
Microsoft Windows Multiple Vulnerabilities (KB4571736)
This host is missing a critical security update according to Microsoft KB4571736 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft .NET Framework Multiple Vulnerabilities (KB4570508)
This host is missing an important security update according to Microsoft KB4570508 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Security update for Windows 8.1, RT 8.1, and Server 2012 R2: August 19, 2020
Security update for Windows 8.1, RT 8.1, and Server 2012 R2: August 19, 2020 Summary This update resolves vulnerabilites in the Windows operating systems that are listed in the "Applies to" section. To learn more about these vulnerabilites, see the following articles: CVE-2020-1530 | Windows Remo...
August 11, 2020âKB4571703 (Monthly Rollup)
None None...
August 11, 2020âKB4571702 (Security-only update)
None None...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4570507)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4570507 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4570502)
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 KB4570502 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET...