390 matches found
PYSEC-2017-91
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...
Joomloc-CAT, version 4.1.3, SQL injection
Joomloc-CAT, version 4.1.3, SQL injection Resolution: update to 4.2.1 Update Notice URL http://www.joomloc.fr.nf/en/downloads-products/file/joomloc-pro-channel-manager-pms.html...
Pivotal Spring Security Security Bypass Vulnerability
Pivotal Software Spring Security is a suite of security frameworks from Pivotal Software, Inc. that provide illustrative security protection for Spring-based applications. A security bypass vulnerability exists in Spring Security versions 3.2.0 - 3.2.9, 4.0.x - 4.1.3 and 4.2.0. An attacker can...
Apache OpenOffice < 4.1.3 Multiple Vulnerabilities
The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.3. It is, therefore, affected by the following vulnerabilities : - A memory corruption issue exists in the Impress tool due to improper validation of user-supplied input when handling elements in invalid...
Elastic Kibana Cross-site Request Forgery (CSRF) Vulnerability - Windows
Elastic Kibana is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeBSD : kibana4 -- CSRF vulnerability (fb2475c2-9125-11e5-bd18-002590263bf5)
Elastic reports : Vulnerability Summary: Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a CSRF attack. Remediation Summary: Users should upgrade to 4.1.3 or 4.2.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
Siemens SIMATIC S7-1200 CSRF Vulnerability (SSA-134003)
Siemens SIMATIC S7-1200 devices are prone to a cross-site request forgery CSRF vulnerability. Copyright C 2015 Greenbone Networks GmbHi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...
Siemens SIMATIC S7-1200 CPU Device Cross-Site Request Forgery Vulnerability
The Siemens SIMATIC S7-1200 CPU device is a small programmable controller from Siemens, Germany, that meets the needs of small and medium-sized automation systems. A cross-site request forgery vulnerability exists in the web server of Siemens SIMATIC S7-1200 CPU devices using firmware versions...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
PT-2015-7043 · Siemens · Simatic S7-1200 Cpu
Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...
CVE-2015-5698
Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-4692
The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libungif-devel-4.1.3 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the giflib-4.1.3 package of the Red Hat Enterprise Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
WordPress GI-Media Library Plugin Directory Traversal Vulnerability
This module exploits a directory traversal vulnerability in WordPress Plugin GI-Media Library version 2.2.2, allowing to read arbitrary files from the system with the web server privileges. This module has been tested successfully on GI-Media Library version 2.2.2 with WordPress 4.1.3 on Ubuntu...
Wordpress InBoundio Marketing PHP Upload Vulnerability
This module exploits an arbitrary file upload in the WordPress InBoundio Marketing version 2.0. It allows to upload arbitrary php files and get remote code execution. This module has been tested successfully on WordPress InBoundio Marketing 2.0.3 with Wordpress 4.1.3 on Ubuntu 14.04 Server. Modul...
InstantASP InstantForum.NET Multiple Cross-Site Scripting Vulnerabilities
InstantASP InstantForum.NET is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-9457
SQL injection vulnerability in classes/monodisplay.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php...
Sql injection
SQL injection vulnerability in classes/monodisplay.class.php in PMB 4.1.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the id parameter to catalog.php...