104 matches found
Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now
Security researchers have discovered a potentially dangerous vulnerability in the firmware of various Hewlett Packard HP enterprise printer models that could be abused by attackers to run arbitrary code on affected printer models remotely. The vulnerability CVE-2017-2750, rated as high in severit...
HP to Patch RCE Bug Impacting 50 Enterprise Printer Models
UPDATE HP Inc. said it has released firmware patches for dozens of enterprise-class printer models affected by an arbitrary code execution bug. According to a security bulletin posted by HP, the vulnerability CVE-2017-2750 is tied to “insufficient solution DLL signature validation” allowing for...
CVE-2015-2750
Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence...
CVE-2015-2750
Removed by vendor...
CVE-2015-2750
CVE-2015-2750 is an open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 that allows remote attackers to redirect users to arbitrary sites and facilitate phishing via the // sequence. The issue affects Drupal’s URL-related API functions; there is no exploitation detail in the...
CVE-2015-2750
Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence...
CVE-2016-2750
CVE-2016-2750 entry is rejected and not used.
Ubuntu: Security Advisory (USN-2750-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities
The remote web server is running a version of Drupal that is 6.x prior to 6.35 or 7.x prior to 7.35. It is, therefore, potentially affected by the following vulnerabilities : - An access bypass vulnerability exists in which password reset URLs can be forged. This allows a remote attacker to gain...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001
Access bypass Password reset URLs - Drupal 6 and 7 Password reset URLs can be forged under certain circumstances, allowing an attacker to gain access to another user's account without knowing the account's password. In Drupal 7, this vulnerability is mitigated by the fact that it can only be...
CVE-2014-2750
CVE-2014-2750 entry is rejected/not used and does not represent an active vulnerability.
CVE-2013-2750
CVE-2013-2750 is an XSS in e107, specifically in e107_plugins/content/handlers/content_preset.php, exploitable when user-supplied input in GET parameters is not properly sanitized (notably via %00/%0d%0a sequences). Affected product: e107 prior to 1.0.3. Impact as described: remote attacker can i...
[SECURITY] [DSA 2780-1] mysql-5.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2780-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 18, 2013 http://www.debian.org/security/faq -...
MySQL 5.1 < 5.1.71 Server Optimizer Denial of Service
The version of MySQL 5.1 installed on the remote host is earlier than 5.1.71. It is, therefore, potentially affected by multiple denial of service vulnerabilities in the 'Server Optimizer' component. Note: Oracle has provided a workaround to address the issue for CVE-2012-2750. C Tenable Network...
Debian DSA-2750-1 : imagemagick - buffer overflow
Anton Kortunov reported a heap corruption in ImageMagick, a program collection and library for converting and manipulating image files. Crafted GIF files could cause ImageMagick to crash, potentially leading to arbitrary code execution. The oldstable distribution squeeze is not affected by this...
e107 'content_preset.php'跨站脚本漏洞(CVE-2013-2750)
Bugtraq ID:58841 CVE ID:CVE-2013-2750 e107是一款内容管理系统。 e107没有正确过滤GET参数中"%00"组合"%0d%0a"的字符输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 e107 v1.0.2 厂商解决方案 e107 v1.0.3已经修复此漏洞，建议用户下载更新： http://e107.org/ http://host/e107plugins/content/handlers/contentpreset.php? %3c%00script%0d%0aalert'reflexted%20XSS'/scr...
e107 CMS 1.0.2 Cross Site Scripting
TC-SA-2013-01: Reflected Cross-Site-Scripting XSS vulnerability in e107 CMS v1.0.2 Published: 2013/04/03 Version 1.0 Affected Products: e107 version 1.0.2 others not tested http://www.e107.org References: TC-SA-2013-01 www.tele-consulting.com/advisories/TC-SA-2013-01.txt used for updates...
