1733 matches found
Easy Property Listings < 3.4 - Cross-Site Scripting (XSS)
Changelog for 3.4 mentions: - MAJOR Security Update Release. Important to update to the latest version to protect your website. Easy Property Listings has been reviewed and approved by the WordPress plugin team. - This is a critical update to Easy Property Listings plugin that is focused on...
eprints.lib.uom.gr Open Redirect vulnerability
Open Bug Bounty ID: OBB-932260 Security Researcher metamorfosec Helped patch 1983 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting eprints.lib.uom.gr...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0039)
The remote OracleVM system is missing necessary patches to address critical security updates : - xen: let allocxenballoonedpages fail if not enough memory free Juergen Gross Orabug: 30073695 - mm/pagealloc.c: calculate 'available' memory in a separate function Igor Redko Orabug: 30073695 - Input:...
MongoDB 3.4 < 3.4.22, 3.6 < 3.6.13, 4.0 < 4.0.9, 4.1 < 4.1.9 User Session Vulnerability - Linux
MongoDB is prone to a vulnerability where after user deletion the improper invalidation of authorization sessions allows an authenticated user SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
CVE-2019-2386
After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB Server v4.0 versions prior to 4.0.9;...
CVE-2019-14417
An issue was discovered in Veritas Resiliency Platform VRP before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within the VRP virtual machine, related to DNS functionality...
CVE-2019-14415
An issue was discovered in Veritas Resiliency Platform VRP before 3.4 HF1. A persistent cross-site scripting XSS vulnerability allows a malicious VRP user to inject malicious script into another user's browser, related to resiliency plans functionality. A victim must open a resiliency plan that a...
Linux kernel buffer overflow vulnerability (CNVD-2019-25066)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the drivers/net/wireless/iwlwifi/iwl-agn-sta.c file in versions of Linux kernel prior to 3.4. The vulnerability stems from a...
PT-2019-13684 · Veritas · Veritas Resiliency Platform
Name of the Vulnerable Software and Affected Versions: Veritas Resiliency Platform versions prior to 3.4 HF1 Description: A persistent cross-site scripting issue allows a malicious user to inject malicious script into another user's browser, related to resiliency plans functionality. This occurs...
PT-2019-6820 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.4 Description: A buffer overflow occurs in the Linux kernel, specifically in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which can cause at least memory corruption. Recommendations: For Linux kernel versions...
geekfz.cn Open Redirect vulnerability
Open Bug Bounty ID: OBB-921567 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting geekfz.cn website and its users...
ML Code Injection Vulnerability
Discuz!ML is an open source community forum system based on the Discuz!X engine. A security vulnerability exists in Discuz!ML version 3.2 to 3.4. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...
CVE-2019-13956
Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...
PT-2019-13493 · Comsenz · Discuz!Ml
Name of the Vulnerable Software and Affected Versions: Discuz!ML versions 3.2 through 3.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a modified language cookie. This can be achieved by altering the cookie value, for example, changing 4gH4 0df5 language=en to...
montages.no Open Redirect vulnerability
Open Bug Bounty ID: OBB-898988 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting montages.no website and its...
CVE-2019-3889
CVE-2019-3889 is a reflected XSS in the authentication flow of OpenShift Container Platform. Affected versions include openshift-online-3, and openshift-enterprise-3.4–3.7 and 3.9–3.11. The vulnerability could enable an attacker to exfiltrate authorization data via a malicious link, with exploita...
DLA-1852-1 python3.4 - security update
Bulletin has no description...
csapps.acer.com Open Redirect vulnerability
Security Researcher nitrozeus Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting csapps.acer.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug...