Squid 3.4.4 - 3.4.11, 3.5.0.1 - 3.5.1 Nonce Replay Security Bypass Vulnerability

Squid is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...

WordPress Private Only 3.5.1 CSRF / Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Details ================ Software: Private Only Version: 3.5.1 Homepage: http://wordpress.org/plugins/private-only/ Advisory report:...

PT-2015-4547 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Manager versions prior to 3.5.1 Description: The issue allows local users to obtain sensitive information by reading files in a directory due to weak permissions on the directories shared by the...

X2Engine < 3.5.1 Multiple Vulnerabilities

According to its version number, the X2Engine application installed on the remote web server is prior to version 3.5.1. It is, therefore, potentially affected by multiple vulnerabilities : - A PHP file inclusion vulnerability exists due to insufficient sanitization of the 'file' HTTP GET paramete...

74cms v3.5.1 后台验证码绕过（可爆破）

简要描述： 20141112 最新版 详细说明： 验证码设计缺陷导致后台可爆破登陆 漏洞证明： 后台登陆抓包，设定字段，验证码可重复使用： 进入后台：...

Mulesoft ESB Runtime 3.5.1 Privilege Escalation / Code Execution Vulnerabilities

Mulesoft ESB Runtime version 3.5.1 suffers from an authenticated privilege escalation vulnerability that can lead to remote code execution. Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to...

MS14-053: Vulnerability in .NET Framework Could Allow Denial of Service (2990931)

The remote Windows host has a version of the Microsoft .NET Framework that is affected by a vulnerability that allows a remote attacker to cause a denial of service by sending specially crafted requests to an ASP.NET web application running on the affected system. Note that ASP.NET is not install...

Microsoft .NET Framework CVE-2014-4062 ASLR Security Bypass Vulnerability

Description Microsoft .NET Framework is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Avaya Conferencing Standard Editio...

Crob FTP Server 3.5.1 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9549/info A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a malformed request a malevolent user may be able to force the server to cras...

Xmyplay 3.5.1 - Denial of Service Vulnerability

No description provided by source. !/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , [email protected] Download : http://us2.un4seen.com/files/xmplay35.zip Tested : Windows XP SP2 fr DATE : 2010-07-31 my $file= mahboul-3lik00.m3u; my $junk= \x41 x 1000000; open$FILE, $file; print$FILE $junk; close$FILE;...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

No description provided by source. WP FuneralPress - stored xss in guestbook FuneralPress is an online website obituary management and guest book program for funeral homes and cemeteries http://wpfuneralpress.com/ tested on: funeralpress version 1.1.6 / wordpress version 3.5.1 impact: malicious...

SunShop Shopping Cart <= 3.5.1 - 'index.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29241/info SunShop Shopping Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PT-2014-2415 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.5.1 Description: The issue is related to the futex wait requeue pi function in the Linux kernel, which does not properly validate futex addresses. This can be exploited by local users to cause a denial of...

Nagios 'status.cgi' Information Disclosure Vulnerability (Jul 2013) - Active Check

Nagios is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

Microsoft .NET Framework Multiple Vulnerabilities (2916607)

This host is missing an important security update according to Microsoft Bulletin MS14-009. OpenVAS Vulnerability Test $Id: secpodms14-009.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft .NET Framework Multiple Vulnerabilities 2916607 Authors: Thanga Prakash S Copyright: Copyright C 2014...

Design/Logic Flaw

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

WordPress 3.5.1远程代码执行漏洞

No description provided by source...

Design/Logic Flaw

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIECACHEON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpiecache...

PHPFox v3.4.1 XSS vulnerabilities

Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them. An attacker can steal the session cookie and take over the account, impersonating the user. It is also possible to modify the content of the page...

CS, XSS and FPD vulnerabilities in WordPress

Hello 3APA3A! These are Content Spoofing, Cross-Site Scripting and Full path disclosure vulnerabilities in WordPress. At WordPress 3.5.2 release the same at 3.5.1 release, WP developers mentioned about multiple fixed holes, but not about all - to make it looks like there were less fixed holes. So...