987 matches found
YAWPP <= 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
The yawpp WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. POST /wordpress-4.3/?p=4 HTTP/1.1 Host: wp.lab User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.10; rv:42.0 Gecko/20100101 Firefox/42.0 Accept:...
openSUSE Security Update : virtualbox (openSUSE-2015-839)
The virtualbox package was updated to version 4.2.36 to fix the following security and non security issues : - Version bump tp 4.2.36 released 2015-11-11 by Oracle - several fixes - Oracle is not more specific - Version bump to 4.2.34 released 2015-10-20 by Oracle bsc951432 - CVE-2015-4813: Only...
phpMyAdmin Security Bypass Vulnerability (Nov 2015) - Linux
phpMyAdmin is prone to reCaptcha bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...
phpMyAdmin Security Bypass Vulnerability (Nov 2015) - Windows
phpMyAdmin is prone to reCaptcha bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...
My Link Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)
The my-link-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
CVE-2015-8104
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by triggering many DB aka Debug exceptions, related to svm.c...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
Slow App Enumeration in StoreFront 3.0 with Receiver 4.3
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information App enumeration takes up to 4 mins. You can expedite the app enumeration by restarting the self service...
CVE-2015-7691
The cryptoxmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service crash via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750...
CVE-2015-7871
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication...
CVE-2015-7855
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service assertion failure via a 6 or mode 7 packet containing a long data value...
WordPress Pie Register 2.0.18 Cross Site Scripting
Details ================ Software: Pie Register Version: 2.0.18 Homepage: https://github.com/GTSolutions/Pie-Register CVE: CVE-2015-7377 Pending CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N CWE: CWE-79 Description ================ An unauthenticated reflected XSS vulnerability in Pie Register...
WordPress <= 4.3 - Authenticated Shortcode Tags Cross-Site Scripting (XSS)
The following payload placed in a page or post does not work in comments: TEST!!!caption width="1" caption='Click me...
WordPress <= 4.3 - Publish Post & Mark as Sticky Permission Issue
...
Design/Logic Flaw
libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha...
PT-2015-7382
Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 4.3.x through 4.3.13.1 phpMyAdmin versions 4.4.x through 4.4.14.0 Description: The issue allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a...
My Page Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)
The my-page-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Logstash vulnerability CVE-2015-5378
Summary: Logstash 1.5.2 and prior versions are vulnerable to a SSL/TLS security issue called the FREAK attack. If you are using the Lumberjack input, FREAK allows an attacker to successfully implement a man in the middle attack, intercepting communication between the Logstash Forwarder agent and...
ESA-2015-115: EMC RecoverPoint for Virtual Machines (VMs) Restriction Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-115: EMC RecoverPoint for Virtual Machines VMs Restriction Bypass Vulnerability EMC Identifier: ESA-2015-115 CVE Identifier: CVE-2015-4526 Severity Rating: CVSSv2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC RecoverPoin...
Logstash vulnerability CVE-2015-4152
Summary: Logstash versions 1.4.2 and prior are vulnerable to a directory traversal attack that allows an attacker to over-write files on the server running Logstash. This vulnerability is not present in the initial installation of Logstash. The vulnerability is exposed when the file output plugin...