465 matches found
Cross site scripting
A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim...
CVE-2018-10937
CVE-2018-10937 describes a cross-site scripting flaw in the tetonic-console component of OpenShift Container Platform 3.11. An attacker who can create pods can leverage this flaw to act on the Kubernetes API as the victim, implying potential privilege abuse within the cluster. The description doe...
CVE-2018-1069
GlusterFS and NFS network filesystems rely on File System User ID and Group ID information in order to restrict access to file shares. However, it's possible to overwrite the Openshift restrictions on container UserId and GroupdId as they are not validated before being sent over the Openshift...
WordPress Store Locator Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Store Locator plugin is one of the store locator plugin . A SQL injection vulnerability exists in WordPress Sto...
Storefront 3.11 - Need to remove the "Details" link for the published applications and desktops
How do I remove the "details" link for the published applications and desktop...
Stack overflow
An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler SEH...
PT-2017-10091
Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A...
FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability
OVERVIEW A researcher working with Trend Micro’s Zero Day Initiative ZDI has identified a stack-based buffer overflow vulnerability in FATEK Automation's PLC WinProladder application. Fatek Automation Fatek has not produced an update to mitigate this vulnerability. ZDI has coordinated with...
CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.
The Atlassian Hipchat Integration Plugin for Bitbucket Server exposed the secret key it used to communicate with a linked HipChat service in various administration pages. For this vulnerability to affect your Bitbucket Server instance you must have a HipChat integration established. To exploit th...
Fedora 22 : nbd-3.11-1.fc22 (2015-12719)
Fix unsafe signal handlers to avoid DoS attack CVE-2015-0847. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] Fedora 22 Update: nbd-3.11-1.fc22
Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...
[SECURITY] Fedora 21 Update: nbd-3.11-1.fc21
Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...
Fedora 21 : drupal7-views-3.11-1.fc21 (2015-7326)
Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
PT-2015-4914 · Nbd +2 · Nbd-Server +2
Name of the Vulnerable Software and Affected Versions: nbd-server versions prior to 3.11 Description: The issue is related to the improper handling of signals in nbd-server.c, which can be exploited by remote attackers to cause a denial of service deadlock via unspecified vectors. Recommendations...
CVE-2014-3988
CVE-2014-3988 is an XSS vulnerability in SunHater KCFinder 3.11 and earlier, exploitable via the file or directory name of an uploaded file in index.php. The published description states that remote attackers can inject arbitrary web script or HTML. Affected software/versions are explicitly SunHa...
JVN#36205251: 365 Links series vulnerable to cross-site scripting
365 Links series provided by php365.com are link directory management tools. 365 Links series contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information...
Sybergen SyGate 2.0/3.11 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1420/info An exploit which causes a Denial of Service to Sybergen's Sygate when run from an internal machine has been released. The exploit sends a UDP packet to port 53 of the gateway. //Sygate Crash by: [email protected]...
Microsoft Windows 3.11 Operating System
Windows 3.11 is an older version of Microsoft Windows. Microsoft ended the support for Windows 3.11 operating system on December 2001. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...
Hex Workshop 4.235.16.0 - .hex Universal Local Buffer Overflow (SEH)
Hex Workshop 4.235.16.0 - .hex Universal Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] Hex Workshop v3//4//5//6 .hex Universal Local Buffer ExploitS SEH Found By: DATASNIPER http://www.bpsoft.com/downloads/ info:: i write 3 exploits for the 3 v...
