CVE-2014-9032

Cross-site scripting XSS vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress 3.9 & 3.9.1 Unlikely Code Execution

...

DEBIAN-CVE-2014-5203

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...

OpenBSD 3.9/4.0 LD.SO Local Environment Variable Clearing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21188/info OpenBSD is prone to a local vulnerability that may allow attackers to pass malicious environment variables to applications, bypassing expected security restrictions. Attackers may be able to exploit this issue ...

PhotoCart <= 3.9 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source...

Zomplog 3.9 - CSRF Vulnerability

No description provided by source...

Juergen Weigert screen 3.9 User Supplied Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1641/info Various format string vulnerabilities exist in versions 3.9.5 and prior of 'screen' that may allow local users to elevate their privileges. If screen is setuid root, it is possible to alter the contents of the...

Zomplog 3.9 - Multiple XSS & CSRF Vulnerabilities

No description provided by source...

Barracuda Firewall 6.1.0.016 - Multiple Vulnerabilities

Barracuda Firewall 6.1.0.016 - Multiple Vulnerabilities Document Title: =============== Barracuda Bug Bounty 30 Firewall - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC:...

PT-2013-5087 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.9 Description: A memory leak issue exists, allowing local users to cause a denial of service by consuming memory. This is achieved by leveraging certain device access to trigger the movement of memory slots...

Design/Logic Flaw

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices is affected by CVE-2013-5547, where malformed EoGRE packets over IPv4/IPv6 can cause a remote denial of service (device reload). This is documented in Cisco advisory Cisco-SA-20131030-ASR1000 and mirrored in NVD/Red Hat records. The root cause is...

Actualizer CMS - Multiple Vulnerabilities

Cross Site Scripting, Blind SQL Injection and Full Path Disclosure that i found on Actualizer CMS. Title: Actualizer CMS - Multiple Vulnerabilities Date: 22.09.2013 Tested on: Linux 3.0 - 3.9 95% Vendor: actualizer.pl Demo: demo.actualizer.pl Dork: intext:"Powered by Actualizer & Heuristic"...

SunGroup CMS 2.0 - Blind SQL Injection & Cross Site Scripting

POST Cross Site Scripting and POST AND/OR time-based blind vulnerabilities on SunGroup CMS v 2.0. Title: SunGroup CMS 2.0 - Blind SQL Injection & Cross Site Scripting Date: 20.09.13 Tested on: Linux 3.0 - 3.9 95% Version: 2.0 Contact: email protected Affected URL's: /cms/ /cms/resources/...

Directory traversal

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...

DEBIAN-CVE-2013-2237

The keynotifypolicyflush function in net/key/afkey.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notifypolicy interface of an IPSec keysocket...

Linux Kernel &quot;iscsi_add_notunderstood_response()&quot;缓冲区溢出漏洞

CVE ID: CVE-2013-2850 Linux Kernel是一款开源的操作系统。 Linux iSCSI子系统存在一个基于堆的缓冲区溢出，允许远程攻击者利用漏洞发送特制请求获得内核执行控制。 在处理超大key时"iscsiaddnotunderstoodresponse"函数drivers/target/iscsi/iscsitargetparameters.c存在一个边界错误，允许攻击者发送超过64字节的KEY触发漏洞，可以以应用程序上下文执行任意代码。 要成功利用漏洞需要配置了iSCSI target并监听网络。 0 Linux Kernel 3.0.x Linux...

Fedora 19 : gpsd-3.9-1.fc19 (2013-7276)

This is an update to the latest upstream release, which fixes a denial of service flaw found in the way AIS driver packet parser processed certain malformed packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenabl...

CVE-2013-3236

The CVE-2013-3236 issue affects the Linux kernel component vmci_transport_dgram_dequeue in net/vmw_vsock/vmci_transport.c; it fails to initialize a length variable, allowing local attackers to read kernel stack memory via crafted recvmsg/recvfrom. Affects kernels before 3.9-rc7. Multiple advisori...

UBUNTU-CVE-2013-3230

The l2tpip6recvmsg function in net/l2tp/l2tpip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...