791 matches found
ImpressPages CMS 3.6 - Arbitrary File Deletion
ImpressPages CMS 3.6 - Arbitrary File Deletion ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content management system with...
ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability
Summary ImpressPages CMS is an open source web content management system with revolutionary drag & drop interface. Description Input passed to the 'files0file' parameter in '/ipcms/modules/administrator/repository/controller.php' is not properly sanitised before being used to delete files. This c...
WordPress <=3.6 - URL Redirect Restriction Bypass
WordPress version 3.6 is affected by a URL redirect restriction bypass vulnerability. It allows an attacker to craft a URL by clicking, that the victim would be taken to a site of the attacker's choice via the Location: tag in a 302 Redirect. Solution Upgrade to version 3.6.1...
[iBliss Security Advisory] Cross-Site Scripting (XSS) vulnerability in Design-approval-system wordpress plugin
Design-Approval-System Wordpress plugin XSS vendor product description A system to streamline the process of getting designs, photos, documents, videos or music approved by clients quickly. Bug Description The walkthrouth web page does not validate the step parameter leading to a Cross-site...
WordPress Design-Approval-System 3.6 Cross Site Scripting
Design-Approval-System Wordpress plugin XSS vendor product description A system to streamline the process of getting designs, photos, documents, videos or music approved by clients quickly. Bug Description The walkthrouth web page does not validate the step parameter leading to a Cross-site...
WordPress 3.6 - PHP Object Injection
...
CVE-2013-5648
Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / slash or \ backslash in a DDOC file...
Samba read_nttrans_ea_list Integer Overflow
Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet. Important Note: in order to work, the "ea support" option o...
Hiawatha < 3.6 URL Handling Weakness
According to its server response header, the installed version of Hiawatha is a version prior to 3.6. A flaw exists in the handling of malicious characters within URLs that has an unspecified impact. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69037;...
Directory traversal
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...
CVE-2013-2309
Cross-site scripting XSS vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."...
mkCMS - 'index.php' Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/60488/info mkCMS is prone to an arbitrary PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the affected application. mkCMS 3.6 is vulnerable; other versions may also be affected...
Kernel: atm: information leak in getsockopt & getsockname
The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...
A writable configured share might get read only
Description Due to a assignment vs equality bug a share reference might get overwritten. This can lead to 'read only = no' from another share to leak into a 'read only = yes' share for a subsequent connections. This is a re-evaluation of an already fixed bug. Workaround Update to 3.6.6 and higher...
Design/Logic Flaw
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
DEBIAN-CVE-2012-6539
The devifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...
Samba < 3.5.21 / 3.6.12 / 4.0.2 SWAT Multiple Vulnerabilities
According to its banner, the version of Samba running on the remote host is 3.5.x prior to 3.5.21, 3.6.x prior to 3.6.12, or 4.x prior to 4.0.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Samba Web Administration Tool SWAT that allows a remot...
CVE-2013-0213
The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...
LibreOffice Import Files Denial of Service Vulnerabilities (Mac OS X)
This host is installed with LibreOffice and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblibreofficemultfilesdosvulnmacosx.nasl 7174 2017-09-18 11:48:08Z asteins $ LibreOffice Import Files Denial of Service Vulnerabilities Mac OS X Authors: Rachana Shetty...
CVE-2011-5202
CVE-2011-5202 affects WinCDEmu 3.6, where BazisVirtualCDBus.sys allows a local user to trigger a denial-of-service (system crash) by issuing an unmount command to batchmnt.exe. The available connected documents confirm the vulnerable component and the affected workflow, but do not provide patch d...