273 matches found
CVE-2016-6223
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tifread.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service crash or possibly obtain sensitive information via a negative index in a file-content buffer...
Squid Denial of Service Vulnerability (CNVD-2016-01997)
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial of service vulnerability exists in Squid versions 3.1.0 through 3.5.15 and 4.0 through...
Squid 'http.cc' DoS Vulnerability (SQUID-2016:2) - Linux
Squid is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Apple At Ease 5.0 Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/531/info At Ease 5.0 will allow a user to access any user's volume on the server through a web browser. The tested configuration is as follows: MacOS 7.6.1 should work with anything greater than 7 At Ease 5.0.2 AppleShare...
PhotoStore 4.0.7 Arbitary File Execution
Exploit for php platform in category web applications . \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://tcc.sch.id Exploit title : PhotoStore 4.0.7 shell upload Author...
openSUSE: Security Advisory for update (openSUSE-SU-2013:1339-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4392
index.php in ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value...
Authentication flaw
index.php in ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations...
CVE-2012-4392
index.php in ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value...
CVE-2012-4392
index.php in ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value...
CVE-2012-1969
The getattachmentlink function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allow...
Server: Auth bypass in index.php
index.php before ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
Command Injection Vulnerability
A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33080 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.7 an...
Command Injection Vulnerability
A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34299 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...
Command Injection Vulnerability
A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33476 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.0 an...
WordPress bSuite Plugin 4.0.7 - Multiple HTML Injection Vulnerabilities
This bSuite plugin is prone to multiple HTML-injection vulnerabilities. This vulnerabilities allow attackers to cookie-based authentication credentials, modify data or control how the site is rendered to the user. Other attacks are also possible. Solution Upgrade the plugin...
McAfee UTM Firewall Cross Site Scripting
Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...