586 matches found
CVE-2017-18571
The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...
Sql injection
The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...
Important kernel security update: New kernel 2.6.32-042stab140.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab140.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 based on the RHEL 6.10 kernel 2.6.32-754.18.2.el6. The new kernel inherits security fixes from the RHEL kernel and features internal fixes. Vulnerability id: CVE-2019-5489 A new...
Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4512194)
Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4512194 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Eclipse BIRT Cross-Site Scripting Vulnerability
Eclipse BIRT is the Eclipse Foundation's set of rich client applications and Web applications for reporting and business intelligence capabilities of open source software . A cross-site scripting vulnerability exists in the 'format' parameter of the Report Viewer in Eclipse BIRT versions 1.0...
Squid Security Update Advisory SQUID-2019:1
Squid is prone to a denial of service vulnerability due to incorrect string termination the cachemgr.cgi which may access unallocated memory. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Squid buffer overflow vulnerability (CNVD-2019-23845)
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A buffer overflow vulnerability exists in Squid versions 3.3.9 through 3.5.28 and 4.x through 4.7. The vulnerability...
Squid Buffer Overflow Vulnerability
Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A buffer overflow vulnerability exists in Squid versions 4.0.23 through 4.7. The vulnerability originates when a netwo...
CVE-2019-12525
CVE-2019-12525 affects Squid (3.3.9–3.5.28 and 4.x–4.7). When Digest authentication is used, Proxy-Authorization parsing may treat a single quote as valid and memcpy with length−1, causing memory corruption. Connected advisories confirm the issue and reference updates to Squid versions; however e...
Microsoft .NET Framework Multiple DoS Vulnerabilities (KB4499408)
This host is missing an important security update according to Microsoft KB4499408 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Important kernel security update: New kernel 2.6.32-042stab137.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab137.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 based on the RHEL 6.10 kernel 2.6.32-754.12.1.el6. The new kernel introduces security and stability fixes. Vulnerability id: CVE-2018-13405 A vulnerability was found in the...
Cross site request forgery (csrf)
Contao 4.7 allows CSRF...
CVE-2019-10643
Contao 4.7 allows Use of a Key Past its Expiration Date...
Code injection
Contao 4.7 allows Use of a Key Past its Expiration Date...
CVE-2019-10643
Contao 4.7 allows Use of a Key Past its Expiration Date...
CVE-2019-10642
Contao 4.7 allows CSRF...
CVE-2019-10642
Contao 4.7 allows CSRF...
CVE-2019-10642
Contao 4.7 allows CSRF...
CVE-2019-10642
Contao 4.7 is affected by a CSRF token check bypass (CSRF vulnerability). Multiple connected advisories (GHSA-HWMH-9JJ9-8C9C, OSV/GHSA-...) describe that the request token verification can be bypassed, enabling unauthorized actions within Contao 4.7. The CVE entry CVE-2019-10642 explicitly states...