DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1360 Tracking ID: 15943 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID:...

Python 3.5 deque.index() Uninitialized Variable Vulnerability

Python version 3.5 suffers from a vulnerability caused by the behavior of the newblock function used by the collections.deque module. When called, newblock allocates memory using PyMemMalloc and does not initialize it. Title: Python 3.5 deque.index Uninitialized Variable Credit: John Leitch...

Python 3.5 scan_eol() Buffer Over-Read Vulnerability

Python 3.5 suffers from a vulnerability caused by the behavior of the scaneol function. When called, the function gets a line from the buffer of a BytesIO object by searching for a newline character starting at the position in the buffer. However, if the position is set to a value that is larger...

Python 3.5 time_strftime() Buffer Over-Read Vulnerability

Python 3.5 suffers from a vulnerability caused by the behavior of the timestrftime function. When called, the function loops over the format string provided, using strchr to search for each instance of '%'. After finding a '%', it continues to search two characters ahead, assuming that each...

Python 3.5 time_strftime() Buffer Over-Read

Title: Python 3.5 timestrftime Buffer Over-read Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-timestrftime-Buffer-Over-read Url2: http://bugs.python.org/issue24917 Resolution: Fixed Python 3.5 suffers from a vulnerability...

Python 3.4 / 3.5 xmlparse_setattro() Type Confusion

Title: Python 3.4 and 3.5 xmlparsesetattro Type Confusion Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-xmlparsesetattro-Type-Confusion Url2: http://bugs.python.org/issue25019 Resolution: Fixed Python 3.4 and 3.5 suffer...

Design/Logic Flaw

The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service CPU consumption and possibly reboot via crafted memory contents that triggers a "time-consuming linear scan,"...

Python 3.5 scan_eol() Buffer Over-Read

Title: Python 3.5 scaneol Buffer Over-read Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-scaneol-Buffer-Over-read Url2: http://bugs.python.org/issue24989 Resolution: Fixed Python 3.5 suffers from a vulnerability caused by...

Command injection

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors...

CSDJCMS 3.5 SQL注入漏洞

No description provided by source...

Directory traversal

Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ dot dot slash in a RETR command...

BisonWare BisonFTP Server 3.5 - Directory Traversal

BisonWare BisonFTP Server 3.5 - Directory Traversal !/usr/bin/python title: BisonWare BisonFTP server product V3.5 Directory Traversal Vulnerability author: Jay Turla tested on Windows XP Service Pack 3 - English software link:...

BisonWare BisonFTP Server 3.5 - Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/python title: BisonWare BisonFTP server product V3.5 Directory Traversal Vulnerability author: Jay Turla tested on Windows XP Service Pack 3 - English software link:...

Synology Download Station Cross-Site Scripting Vulnerability

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via file upload' feature of Synology Download Station prior to version 3.5-2962, which can be exploited to inject arbitrary web script or...

Synology Download Station Cross-Site Scripting Vulnerability (CNVD-2015-06011)

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via URL' feature in Synology Download Station prior to version 3.5-2967, which can be exploited by remote attackers to inject arbitrary web...

CVE-2015-6913

Affected product: Synology Download Station. Vulnerability: Cross-site scripting (XSS) in theCreate download task via URL feature. Component/entry point: add_url_task action to dlm/downloadman.cgi. Version range: vulnerable prior to 3.5-2967. Root cause/impact: attacker can inject arbitrary web s...

Internet Bug Bounty: Python 3.3 - 3.5 product_setstate() Out-of-bounds Read

http://bugs.python.org/issue25021...

Pdf Shaper Buffer Overflow

This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank definition: http://dev.metabuffer.com/redmine/projects/framework/wiki/ExploitRanking...

Design/Logic Flaw

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4....

Microsoft .NET Framework Remote Code Execution Vulnerabilities (3078662)

This host is missing a critical security update according to Microsoft Bulletin MS15-080. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...