144 matches found
Joomla! Information Disclosure and XSS Vulnerabilities (Jul 2017)
Joomla is prone to information disclosure and cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
EMC ViPR SRM Cross-Site Scripting Vulnerability (CNVD-2016-07740)
EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...
Fedora 22 : ganglia-3.7.2-6.fc22 (2015-ee7a2b5844)
Update to ganglia-web 3.7.1, including security fix for CVE-2015-6816. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the tiff package up to version 3.7.2 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
APC Network Management Card Cross Site Request Forgery and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site request forgery issues to alter the settings on...
CVE-2014-0165
WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-5648
Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / slash or \ backslash in a DDOC file...
CVE-2013-3302
Race condition in the smbsendrqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified other impact via vectors involving a reconnection event...
PT-2013-4284 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.2 Description: A race condition exists in the smb send rqst function in fs/cifs/transport.c, which can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference and...
PT-2012-5462 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.2 Description: The issue concerns the load script function in fs/binfmt script.c, which does not properly handle recursion. This allows local users to obtain sensitive information from kernel stack memory vi...
CVE-2010-2759
Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in 1 bug and 2 attachment phrases, which allows remote authenticated users to cause a denial of service bug invisibility via a crafted...
Bugzilla 3.7/3.7.1 Information Disclosure
According to its banner, the version of Bugzilla installed on the remote host fails to restrict access to bugs created with inbound email interface emailin.pl or with 'Bug.create' method in the WebServices interface to 'mandatory' or 'Default' groups. This could allow bug information to become...
Design/Logic Flaw
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting...
CVE-2008-3279
CVE-2008-3279: Untrusted RPATH in libbrlttybba.so of brltty 3.7.2 enables local privilege elevation via a crafted library. Multiple advisories (e.g., RHSA-2010-0181) document the issue and provide updates to fix the vulnerability; OpenVAS/Nessus entries reference the same CVE and patch context. T...
CVE-2008-3279
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting...
CVE-2008-3279
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting...
brltty: insecure relative RPATH
Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting...
APC Network Management Card - Cross-Site Request Forgery Cross-Site Scripting
APC Network Management Card - Cross-Site Request Forgery Cross-Site Scripting source: https://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site reque...
APC Network Management Card - Cross-Site Request Forgery / Cross-Site Scripting
source: https://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site request forgery issues to alter the settings on affected devices, which may lead to...