33558 matches found
ambassadeur.maaf.fr Cross Site Scripting vulnerability
Security Researcher Rbcafe Helped patch 255 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ambassadeur.maaf.fr website and its users. Following...
Important: Red Hat Security Advisory: Red Hat A-MQ Broker 7.5 release and security update
Red Hat A-MQ Broker 7.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2019-3834
It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 JON. This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3...
Input validation
It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 JON. This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3...
realtyworldbollinger.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-984300 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
openSUSE Security Update : fish3 (openSUSE-2019-2188)
This update includes fish3 into the openSUSE Leap 15.1 distribution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2019-2188. The text description of this plugin is C SUSE LLC. include"compat.inc"; if...
MariaDB 10.0.0 < 10.0.8 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.8 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and...
openSUSE: Security Advisory for fish3 (openSUSE-SU-2019:2177-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS 2.0 SP3 : dump (EulerOS-SA-2019-2029)
According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could creat...
EulerOS 2.0 SP3 : grub2 (EulerOS-SA-2019-2011)
According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could...
EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-2037)
According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc...
EulerOS 2.0 SP5 : lua (EulerOS-SA-2019-1978)
According to the version of the lua package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service...
CVE-2014-10397
creationtimestamp| type| source ---|---|--- 2019-09-21 00:31:29+00:00| seen| https://t.me/cibsecurity/6932...
CVE-2014-10397
The CVE-2014-10397 entry concerns the Antioch WordPress theme (up to 2014-09-07). A vulnerability in lib/scripts/download.php allows an attacker to trigger arbitrary file downloads by manipulating the file parameter, enabling partial confidentiality impact. Root cause is improper handling of the ...
CVE-2014-10396
The CVE-2014-10396 entry corresponds to a vulnerability in the Epic WordPress theme (prior to fix date not provided in the documents) that allows arbitrary file downloads through the file parameter to includes/download.php. Affected component: Epic WordPress theme; vulnerability type: arbitrary f...
CVE-2014-10396
The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php...
MariaDB 10.0.0 < 10.0.9 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.9 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to...
yj.co.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-965086 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
skolskiportal.hr Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting skolskiportal.hr website and its users. Following...