64383 matches found
CVE-2017-20127
KB Login Authentication Script 1.1 is affected by a SQL injection vulnerability. The issue arises from manipulating the username/password arguments with the payload 'or''=' which allows remote exploitation. The vulnerability is publicly disclosed and may be exploited by attackers. Connected docum...
CVE-2017-20127 KB Login Authentication Script sql injection
A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...
CVE-2017-20126 KB Affiliate Referral Script index.php sql injection
A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...
CVE-2017-20126
KB Affiliate Referral Script 1.0 contains a SQL injection in /index.php triggered by manipulating the username/password fields with the payload 'or''='; exploitation is remote and the public exploit is available. This CVE (CVE-2017-20126) affects the script and has been discussed across multiple ...
New 'Retbleed' Speculative Execution Attack Affects AMD and Intel CPUs
Security researchers have uncovered yet another vulnerability affecting numerous older AMD and Intel microprocessors that could bypass current defenses and result in Spectre-based speculative-execution attacks. Dubbed Retbleed by ETH Zurich researchers Johannes Wikner and Kaveh Razavi, the issue ...
SUSE: Security Advisory (SUSE-SU-2022:2379-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Acrobat 2017 Security Update (APSB22-32) - Mac OS X
Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
movie-review-sentiment-analysis 路径遍历漏洞
movie-review-sentiment-analysis is used by Rohit Nayak, an individual developer, to perform sentiment analysis on IMDB movie reviews in order to categorize them as positive or negative reviews. A security vulnerability exists in movie-review-sentiment-analysis version 2017-05-07 and earlier, whic...
TrainEnergyServer 路径遍历漏洞
TrainEnergyServer is a train energy server by an individual developer in Rustam, South Korea. A security vulnerability exists in GitHub's rusyasoft/TrainEnergyServer project version 2017-08-03 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...
homepage 路径遍历漏洞
homepage is a web application for personal websites by Neil Lakin, an individual developer in the United States. A security vulnerability exists in homepage version 2017-03-06 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path travers...
CVE-2021-29281
File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...
Unrestricted file upload
File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...
CVE-2021-29281
CVE-2021-29281 is a file-upload vulnerability in GFI Mail Archiver prior to or up to v15.1 caused by insecure use of the Telerik Web UI plugin, tying to CVE-2014-2217 and CVE-2017-11317. The vulnerability enables arbitrary file uploads/execution via the Telerik UI for ASP.NET AJAX file upload iss...
Security Bulletin: Tivoli Netcool/Omnibus installation contains vulnerable Eclipse Jetty code libraries (Multiple CVEs)
Summary The 'Netcool MIb Manager GUI' use a version of the Eclipse Jetty libary that contains known vulnerabilities. These vulnerabilities have been addressed by an upgrade to Jetty 9.3.29. Vulnerability Details CVEID:CVE-2017-7657 DESCRIPTION: Eclipse Jetty is vulnerable to HTTP request smugglin...
Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.
Summary IBM QRadar Network Security has addressed following vulnerabilities in kernel. Vulnerability Details CVEID:CVE-2017-17807 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to bypass security restrictions, caused by omitting an access-control check when adding a key to t...
PHPList SQL Injection (CVE-2017-20029; CVE-2017-20032)
An SQL injection vulnerability exists in PHPList. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Atlassian Jira 7.2.x < 8.18.1 / 8.19.0 (JRASERVER-72660)
The version of Atlassian Jira installed on the remote host is prior to 7.2.x 8.18.1 / 8.19.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72660 advisory. - Remote code execution in workflow import - CVE-2017-18113 CVE-2017-18113 Note that Nessus has not tested for...
Atlassian Jira < 8.20.9 / 8.22.0 (JRASERVER-73244)
The version of Atlassian Jira installed on the remote host is prior to 8.20.9 / 8.22.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73244 advisory. - Outdated Moment.js in Jira Server CVE-2017-18214, CVE-2016-4055 CVE-2017-18214 Note that Nessus has not tested for...
