CVE-2017-8585

CVE-2017-8585 is a denial-of-service issue in Microsoft .NET Framework (affected versions include 4.6, 4.6.1, 4.6.2, 4.7) caused by improper handling of incoming requests to a .NET web application. The vulnerability could allow a remote attacker to cause a DoS condition by sending specially craft...

May 2017 Preview of the Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, and 4.6.2 for Windows Server 2012 (KB4019289): May 16, 2017

May 2017 Preview of the Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, and 4.6.2 for Windows Server 2012 KB4019289: May 16, 2017 Notice This release has been removed from Windows Update because of the issues that are described in the following .NET Blog article: .NET Framework May...

CVE-2016-10366

Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting XSS attack...

Cross site scripting

Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting XSS attack...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014981)

This host is missing a critical security update according to Microsoft Security Updates KB4014981 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Linux kernel local elevation of privilege vulnerability (CNVD-2016-09532)

Linux kernel is an open source operating system. IPv6 netfilter in Linux kernel version 4.6.2 fails to validate specific offset fields, and a local ordinary user can replace the policy of the ip6tables module with IP6TSOSETREPLACE, and thus gain system root privileges...

Linux Kernel 4.6.2 (Ubuntu 16.04.1) - 'IP6T_SO_SET_REPLACE' Local Privilege Escalation

Exploit Title: Linux kernel = 4.6.2 - Local Privileges Escalation via IP6TSOSETREPLACE compat setsockopt call Date: 2016.10.8 Exploit Author: Qian Zhang@MarvelTeam Qihoo 360 Version: Linux kernel = 4.6.2 Tested on: Ubuntu 16.04.1 LTS Linux 4.4.0-21-generic CVE: CVE-2016-4997...

PhpMyAdmin 4.3.0—4.6.2 authorized users remote command execution vulnerability

Problem source code part in PMA 4.6.2: - libraries/controllers/table/TableSearchController.php:708: php 708: private function getRegexReplaceRows ... 727: if isarray$result 728: foreach $result as $index=$row 729: $result$index1 = pregreplace 730: "/" . $find . "/", 731: $replaceWith, 732: $row0...

CVE-2016-5097

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...

CVE-2016-5097

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-04565)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in...

phpMyAdmin Sensitive Information Disclosure Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A sensitive information disclosure vulnerability...

phpMyAdmin < 4.6.2 Information Disclosure (PMASA-2016-14)

Binary data 9358.prm...

TcpDump - rpki_rtr_pdu_print Out-of-Bounds Denial of Service

TcpDump - rpkirtrpduprint Out-of-Bounds Denial of Service Exploit Title: TcpDump rpkirtrpduprint Out-of-Bounds Denial of Service Date: 7.18.2015 Exploit Author: Luke Arntson [email protected] Vendor Homepage: http://www.tcpdump.org/ Software Link: http://www.tcpdump.org/ Version: 4.6.2, 4.5.1,...

Opsview Multiple XSS Vulnerabilities (Jun 2015)

Opsview is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Opsview <= 4.6.2 - Multiple XSS Vulnerabilities

Exploit for php platform in category web applications Exploit title: Opsview 4.6.2 - Multiple XSS Date: 07-06-2015 Vendor homepage: www.opsview.com Version: 4.6.2 CVE: CVE-2015-4420 Author: Dolev Farhi @dolevf Tested On: Kali Linux + Windows 7 Details: -------- Opsview is a monitoring system base...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the rsyslog-gnutls-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt-demos-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt-examples-4.6.2 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt-demos-4.6.2 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...