33554 matches found
CVE-2014-7174
CVE-2014-7174 affects FarLinX X25 Gateway; a directory traversal vulnerability exists in the log-handling feature, enabling access to restricted paths. Reported for versions up to 2014-09-25. CVE details show a network-accessible issue with medium overall impact (C/L, I/N, A/N per CVSSv2/v3.1). C...
CVE-2014-8941
CVE-2014-8941 affects Lexiglot (PHP translation platform) through 2014-11-20. The issue is a SQL injection vulnerability arising from unsafely built queries in the admin interface, specifically via URLs like admin.php?page=users&from_id= and admin.php?page=history&limit=. Evidence across multiple...
CVE-2014-8943
CVE-2014-8943 affects Lexiglot up to 2014-11-20 and enables a server-side request forgery (SSRF) via the admin.php?page=projects svn_url parameter. The available documents identify the vulnerable component as Lexiglot (PHP-based translation platform) and point to the svn_url parameter as the inje...
CVE-2014-8944
Lexiglot through 2014-11-20 allows XSS Reflected via the username, or XSS Stored via the admin.php?page=config installname, intromessage, or newfilecontent parameter...
CVE-2014-8944
Lexiglot (PHP-based translation platform) is affected by CVE-2014-8944 through 2014-11-20, with XSS vulnerabilities in both Reflected and Stored forms. The Reflected XSS can be triggered via the username parameter, while Stored XSS is possible in admin.php?page=config via install_name, intro_mess...
CVE-2014-8937
The CVE-2014-8937 entry concerns Lexiglot (PHP-based translation platform) up to version released 2014-11-20. The vulnerability stems from api/update.php performing svn update operations that consume substantial server resources, leading to denial of service. The connected documents confirm the c...
CVE-2014-8938
Lexiglot (up to 2014-11-20) is affected by an information-disclosure vulnerability where local users can obtain usernames and passwords by listing a process, due to credentials being exposed on the command line. Root cause: credentials present on the command line. Impact is a local confidentialit...
CVE-2014-8939
Lexiglot (PHP-based translation platform) is affected by CVE-2014-8939 via a path traversal-like leakage: remote attackers can obtain the full filesystem path by requesting include/smarty/plugins/modifier.date_format.php when PHP is configured to emit warnings. The core detail reported across sou...
CVE-2014-8940
The CVE-2014-8940 entry affects Lexiglot (a PHP-based translation platform). The vulnerability is an information disclosure allowing remote attackers to obtain names and details of projects by accessing the /update.log URI, with impact described as exposure of limited data (names and project deta...
CVE-2014-8945
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
CVE-2014-8945
CVE-2014-8945 affects Lexiglot, a PHP-based translation platform. The vulnerability is a command injection in admin.php?page=projects, exploitable through the username and password fields. Multiple sources confirm the issue, noting it affects Lexiglot releases up to and including 2014-11-20. The ...
NewStart CGSL CORE 5.04 / MAIN 5.04 : chrony Multiple Vulnerabilities (NS-SA-2020-0027)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has chrony packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1...
MS14-022: Description of the security update for SharePoint Foundation 2013: May 13, 2014
Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis security update resolves vulnerabilities in Microsoft Office server...
Update Rollup 6 for System Center 2012 R2 Data Protection Manager
Update Rollup 6 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for Update Rollup 6 for...
gamesonomy.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1161401 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-2014
An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbitrary shell commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7...
CVE-2020-2014 PAN-OS: OS injection vulnerability in PAN-OS management server
An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbitrary shell commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7...
CVE-2020-2014
CVE-2020-2014 : PAN-OS contains an OS command injection vulnerability in the management server. Authenticated users can inject and execute arbitrary shell commands with root privileges. Affected: PAN-OS 7.1 and 8.0; PAN-OS 8.1 before 8.1.14; PAN-OS 9.0 before 9.0.7. References indicate a fix/patc...
silhouettechile.cl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157783 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
