233 matches found
PT-2018-10080 · Ovirt · Ovirt Engine
Name of the Vulnerable Software and Affected Versions: ovirt-engine versions up to 4.2.3 Description: The issue concerns an unfiltered password when choosing manual database provisioning. When engine-setup is run and manual database provisioning or connection to a remote database is chosen, the...
Appnitro MachForm Path Traversal Vulnerability
Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A path traversal vulnerability exists in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited to access arbitrary files on the system by sending the 'q' parameter to t...
Appnitro MachForm < 4.2.3 Multiple Vulnerabilities
Appnitro MachForm is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
Appnitro MachForm SQL Injection Vulnerability
Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A SQL injection vulnerability exists in the download.php file in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited by a remote attacker to browse, add, change, or...
CVE-2018-6410
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter...
Path traversal
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding apform table leads to a path traversal vulnerability via the download.php q parameter...
csgjusticecenter.org XSS vulnerability
Open Bug Bounty ID: OBB-616248 Description| Value ---|--- Affected Website:| csgjusticecenter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress 4.2.3 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Google Map Landkarten,4.2.3,SQL Injection
Google Map Landkarten from joomla-24.de, versions 4.2.3 and previous, SQL Injection...
Cross site scripting
oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...
CVE-2018-1000095
oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...
CVE-2018-1000095
oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...
CVE-2018-1000095
CVE-2018-1000095 is a stored XSS in oVirt 4.2.0–4.2.2 within the web admin UI's VM name/description. Root cause: HTML sanitization was not applied consistently across fields, enabling a VM Admin to inject script/HTML that could affect other VM/Cluster administrators. The issue is fixed in version...
CVE-2018-1000095
oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...
IBM Spectrum Scale Information Disclosure Vulnerability (CNVD-2018-05069)
IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The solution supports helping clients reduce storage costs while improving security and management efficiency in...
CVE-2017-1654
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378...
About the security content of watchOS 4.2.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of watchOS 4.2.3
About the security content of watchOS 4.2.3 This document describes the security content of watchOS 4.2.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Apple Promises Fix for Latest ‘Text Bomb’ Bug As Abuse Spreads
UPDATE Apple said it is working on a fix for the latest text bomb bug that crashes a number of iOS and Mac apps that display specific Telugu language characters. On Monday, it made good on the promise and announced the availability of a patch CVE-2018-4124 for iOS 11.2.6, watchOS 4.2.3, tvOS...
