1663 matches found
CVE-2018-6588
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer...
PT-2018-17650 · Ca · Ca Api Developer Portal
Name of the Vulnerable Software and Affected Versions: CA API Developer Portal versions 3.5 up to and including 3.5 CR6 Description: The issue is related to a stored cross-site scripting vulnerability in the processing of profile pictures. Recommendations: For CA API Developer Portal versions 3.5...
The Firmware Analysis and Comparison Tool: FACT
The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...
Arbitrary File Read Vulnerability in Xingyunhai CMS V3.5
Xing Yunhai CMS XYHCMS is a completely open source set of CMS content management system , simple , easy to use. XYHCMS V3.5 version of the existence of arbitrary file reading vulnerability , attackers can use the vulnerability to read any file on the site to obtain sensitive information...
Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4054999)
This host is missing an important security update according to Microsoft Security Updates KB4054999. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Description of the Security Only update for .NET Framework 3.5 SP1 for Windows Server 2012 (KB 4054175)
Description of the Security Only update for .NET Framework 3.5 SP1 for Windows Server 2012 KB 4054175 View products that this article applies to. Summary This security update resolves a security feature bypass vulnerability that exits when Microsoft .NET Framework and .NET Core components do...
Description of Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2012 (KB 4054997)
Description of Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2012 KB 4054997 Notice This update is included in the February 2018 Preview of the Quality Rollups for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 KB 4074806. Part...
WordPress Smart Google Code Inserter plugin <=3.4 - Authorization bypass vulnerability
Authorization bypass vulnerability found by Benjamin Lim in WordPress Smart Google Code Inserter plugin versions =3.4. Solution Update the WordPress Smart Google Code Inserter plugin to the latest available version at least version 3.5...
Cambium ePMP1000 - 'get_chart' Shell via Command Injection (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cambium ePMP1000 'getchart' Shell via Command Injection v3.1-3.5-RC7", 'Description' = % This module exploits an OS Command Injection vulnerabilit...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
Sql injection
Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...
Cross site request forgery (csrf)
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...
CVE-2017-17949
Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...
CVE-2017-17950
CVE-2017-17950 affects Cells Blog 3.5, where the pub_readpost.php ptid parameter enables SQL injection via user-supplied input. The vulnerability’s impact is described in multiple sources (e.g., NVD and CNVD) as allowing unauthorized access to data with partial to high severity. Exploitation deta...