libbsd: denial of service

CVE-2016-2090 buffer overflow libbsd 0.8.1 and earlier contains a buffer overflow in the function fgetwln. An "if" checks if it is necessary to reallocate memory in the target buffer. However this check is off by one, therefore an out of bounds write happens...

CVE-2015-2090

SQL injection vulnerability in the ajaxsurvey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the surveyid parameter in an ajaxsurvey action to wp-admin/admin-ajax.php...

CVE-2015-2090

The CVE-2015-2090 issue affects the WordPress Survey and Poll plugin (version 1.1.7) and is caused by a blind SQL injection in the ajax_survey function (settings.php) that processes the survey_id parameter sent to wp-admin/admin-ajax.php. Exploitation could allow remote attackers to execute arbit...

Wordpress Survey And Poll Plugin SQL Injection (CVE-2015-2090)

An SQL injection vulnerability has been reported in Wordpress Survey and Poll Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Fedora Update for Pound FEDORA-2014-13777

Check the version of Pound SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868477";...

Fedora Update for Pound FEDORA-2014-13764

Check the version of Pound SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868456";...

CVE-2014-2621

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2090...

CVE-2014-2621

HP iMC (HP Intelligent Management Center) and HP BIMS (Branch Intelligent Management System) are vulnerable to a remote information disclosure in versions before 7.0 E02020P03 (iMC) and before 7.0 E0201P02 (BIMS). The issue is identified as CVE-2014-2621 (ZDI-2090). The HP Security Bulletin HPSBH...

CVE-2014-2621

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2090...

Cisco TFTP Server 1.1 - DoS

No description provided by source. Exploit Title: Cisco TFTP Server 1.1 Date: 2010-03-25 Author: SuBz3r0 Software Link: http://www.oldversion.com/CiscoTFTPServer.html Version: 1.1 Tested on: XP SP3,Win2k3 CVE : if exists Code : Cisco TFTP Server v1.1 DoS print print print SuBz3r0 print print prin...

CVE-2013-2090

The Creme Fraiche Ruby gem (pre-0.6.1) is vulnerable to OS command injection via unsanitized file names in email attachments, enabling remote execution of arbitrary commands. Root cause: set_meta_data processes attachment filenames without proper validation, allowing shell metacharacters to pass ...

CVE-2014-2090

Multiple cross-site scripting XSS vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tar, 2 tarval, or 3 title parameter...

[SECURITY] CVE-2013-4286 Incomplete fix for CVE-2005-2090 (Information disclosure)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2013-4286 Incomplete fix for CVE-2005-2090 Information disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 - - Apache Tomcat 7.0.0 to 7.0.42 - - Apache Tomcat 6.0.0 to 6.0.37...

Ubuntu: Security Advisory (USN-2090-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : Important: / tomcat (ELSA-2007-0327)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0327 advisory. jakarta-commons-modeler-1.1-8jpp.1.0.2.el5 1.1-8jpp.1.0.2.el5 - rebuild after the fix for bug 238139 made it into the build root - Resolves: bug 238694...

Ruby Gem Creme Fraiche 0.6 Command Injection

TITLE: Remote command Injection in Creme Fraiche 0.6 Ruby Gem DATE: 5/14/2013 AUTHOR: Larry W. Cashdollar @larry0 DOWNLOAD: http://rubygems.org/gems/cremefraiche, http://www.uplawski.eu/technology/cremefraiche/ DESCRIPTION: Converts Email to PDF files. VENDOR: Notifed on 5/13/2013, provided fix...

Fedora Update for mediawiki119 FEDORA-2013-2090

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for FlightGear FEDORA-2012-8615

Check for the Version of FlightGear OpenVAS Vulnerability Test Fedora Update for FlightGear FEDORA-2012-8615 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for SimGear FEDORA-2012-8615

Check for the Version of SimGear OpenVAS Vulnerability Test Fedora Update for SimGear FEDORA-2012-8615 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for SimGear FEDORA-2012-8650

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...