SilverStripe CMS User Enumeration Vulnerability

SilverStripe CMS is a New Zealand SilverStripe company's open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A security vulnerability exists in the login and password reset forms in SilverStripe C...

SilverStripe CMS Cross-Site Scripting Vulnerability (CNVD-2017-34509)

SilverStripe CMS is a New Zealand SilverStripe company's open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site scripting vulnerability exists in SilverStripe CMS versions prior to 3.6.1...

SilverStrip CMS 3.5.3 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Persistent Cross-Site Scripting product: SilverStripe CMS vulnerable version: =3.5.3 fixed version: 3.6.1 impact: Medium homepage: https://www.silverstripe.org/ found:...

SilverStrip CMS 3.5.3 Cross Site Scripting Vulnerability

SilverStripe CMS versions 3.5.3 and below suffer from a persistent cross site scripting vulnerability. title: Persistent Cross-Site Scripting product: SilverStripe CMS vulnerable version: =3.5.3 fixed version: 3.6.1 impact: Medium homepage: https://www.silverstripe.org/ found: 2017-03-15 by: S...

AnyDesk Hijacking Vulnerability

AnyDesk for Windows is a suite of remote desktop software from the German company AnyDesk Software. A hijacking vulnerability exists in version 3.6.1 of AnyDesk for Windows-based platforms. No details of the vulnerability are provided at this time...

CVE-2017-9465

The yrarenawritedata function in YARA 3.6.1 allows remote attackers to cause a denial of service buffer over-read and application crash or obtain sensitive information from process memory via a crafted file that is mishandled in the yrrefastexec function in libyara/re.c and the yrscanmatchcallbac...

DotCMS SQL Injection Vulnerability (CNVD-2017-01933)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build . A SQL injection vulnerability exists in categoriesServlet in DotCMS versions prior to 3.6.1. A remote attacker can explo...

RabbitMQ Server < 3.6.1 DoS Vulnerability

RabbitMQ Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! < 3.6.1 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.6.1. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the mail component due to improper sanitization of input before...

Pivotal Software RabbitMQ Denial of Service Leakage

Pivotal Software RabbitMQ is a suite of open source message broker software that implements the Advanced Message Queuing Protocol AMQP from Pivotal Software in the UK. A denial of service vulnerability exists in versions of Pivotal Software RabbitMQ prior to 3.6.1. An attacker could exploit this...

[SECURITY] [DLA 418-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u9 CVE ID : CVE-2016-2221 CVE-2016-2222 Debian Bug : 813697 WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libtiff-devel-3.6.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the Crucible web interface. All versions of Crucible up to and including 3.6.1...

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the FishEye web interface. All versions of FishEye up to and including 3.6.1 a...

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the FishEye web interface. All versions of FishEye up to and including 3.6.1 a...

Fedora 20 : pdns-recursor-3.6.1-1.fc20 (2014-10632)

PowerDNS Recursor Security Release 3.6.1 - CVE-2014-3614 Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely CVE-2014-3614 Affected: All deployments of PowerDNS Recursor 3.6.0 Note that Tenable Network Security has extracted the preceding description block directly...

DEBIAN-CVE-2014-3614

Unspecified vulnerability in PowerDNS Recursor aka pdnsrecursor 3.6.x before 3.6.1 allows remote attackers to cause a denial of service crash via an unknown sequence of malformed packets...

[SECURITY] [DLA 56-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u5 CVE ID : CVE-2014-2053 CVE-2014-5204 CVE-2014-5205 CVE-2014-5240 CVE-2014-5265 CVE-2014-5266 Multiple security issues have been discovered in Wordpress, a web blogging tool, resulting in denial of service or information disclosure. More information...

Debian DSA-3001-1 : wordpress - security update

Multiple security issues have been discovered in Wordpress, a web blogging tool, resulting in denial of service or information disclosure. More information can be found in the upstream advisory at https://wordpress.org/news/2014/08/wordpress-3-9-2/. %NASLMINLEVEL 70300 C Tenable Network Security,...

FusionPHP Fusion News 3.3/3.6 Administrator Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10836/info It is reported that Fusion News is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands. This...