Open Source Point Of Sale Stored XSS

The Open Source Point of Sale POS application running on the remote web server is vulnerable to a Stored XSS vulnerability. - A Stored cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker ca...

EulerOS 2.0 SP2 : screen (EulerOS-SA-2019-1059)

According to the version of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial o...

Security Bulletin: Potential vulnerability in WebSphere Application Server (CVE-2015-0899)

Summary There is a potential vulnerability in WebSphere Application Server. Vulnerability Details CVEID: CVE-2015-0899 DESCRIPTION: Apache Struts could allow a remote attacker to bypass security restrictions, caused by an error in the MultiPageValidator implementation. An attacker could exploit...

Directory Traversal in bitty

Affected versions of bitty are vulnerable to directory traversal via the URL path in GET requests. Recommendation The bitty package is not currently maintained, and has not seen an update since 2015. At this time, the best available mitigation is to use an alternative module that is actively...

CVE-2015-4615

creationtimestamp| type| source ---|---|--- 2019-02-16 00:24:14+00:00| seen| https://t.me/cibsecurity/2593...

CVE-2015-4617

creationtimestamp| type| source ---|---|--- 2019-02-16 00:24:13+00:00| seen| https://t.me/cibsecurity/2592...

CVE-2015-4615

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables...

CVE-2015-4615

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables...

MongoDB 2.6.x < 2.6.9, 3.0.x < 3.0.14, 3.2.x < 3.2.8 mongod

The version of the remote MongoDB server is 2.6.x prior to 2.6.9, is 3.0.x 3.0.14 or is 3.2.x 3.2.8. It is, therefore, affected by multiple vulnerabilities. - A credentials disclosure vulnerability exists in the PEMKeyPassword, clusterPassword and Windows servicePassword. An unauthenticated local...

Amazon Linux AMI : libXcursor (ALAS-2019-1150)

XcursorThemeInherits in library.c in libXcursor allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. CVE-2015-9262 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI...

SAMSUNG X7400GX Sync Thru Web Cross Site Scripting

alertXSS.XSSproxy.org URL http://X.X.X.X/sws/swsAlert.sws?popupid=%3CSCRIPT%3Ealert%22XSS%22;%3C/SCRIPT%3E&type=alert&bullet=suc&func=&Nfunc=closePopup'successMsg ','',''&flag=bob@%3CSCRipt%3EalertXSS%3C/scrIPT%3E.XSSproxy.org &frame=&msg=The%20requested%20reports%20will%20be%20printed Parameter...

SUSE SLED12 / SLES12 Security Update : libunwind (SUSE-SU-2019:0284-1)

This update for libunwind fixes the following issues : Security issues fixed : CVE-2015-3239: Fixed a off-by-one in the dwarftounwregnum function bsc936786 Non-security issues fixed: Fixed a dependency issue with libzmq5 bsc1122012 Fixed build on armv7 bsc976955 Note that Tenable Network Security...

SUSE-SU-2019:0284-1 Security update for libunwind

This update for libunwind fixes the following issues: Security issues fixed: - CVE-2015-3239: Fixed a off-by-one in the dwarftounwregnum function bsc936786 Non-security issues fixed: - Fixed a dependency issue with libzmq5 bsc1122012 - Fixed build on armv7 bsc976955...

Low: libXcursor

Issue Overview: XcursorThemeInherits in library.c in libXcursor allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. CVE-2015-9262 Affected Packages: libXcursor Issue Correction: Run yum update libXcursor or yum update --advisory...

Debian DLA-1654-1 : libav security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-8542 libavcodec/utils.c omitted a certain codec ID during enforcement of alignment, which allowed remote attackers to cause a denial of ervice out-of-bounds access or possibly...

Photon OS 1.0: Systemd PHSA-2017-0041

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0041. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121751;...

Photon OS 1.0: Libxslt PHSA-2017-0025

An update of the libxslt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121715;...

CVE-2015-9282

creationtimestamp| type| source ---|---|--- 2019-02-06 22:17:26+00:00| seen| https://t.me/cibsecurity/2426...

CVE-2015-9282

The CVE-2015-9282 entry concerns the Grafana Pie Chart Panel plugin (up to 2019-01-02). The vulnerability is an XSS flaw in legend or tooltip data, enabling an attacker to influence a Grafana dashboard when the chart is embedded. The underlying cause is untrusted data being rendered in chart UI c...

Security Bulletin: IBM InfoSphere Change Data Capture is affected by an Apache Derby open source library vulnerability (CVE-2015-1832)

Summary IBM InfoSphere Change Data Capture has addressed the following vulnerability: CVE-2015-1832 - Apache Derby could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML datatype and XmlVTI. An attacker could...