CVE-2014-3818

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

Juniper Junos BGP UPDATE 'rpd' Remote DoS (JSA10653)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP UPDATE messages using 4-byte AS numbers. A remote attacker can exploit this issue, by sending a specially crafted BGP UPDATE packet, to...

vBulletin 4.x SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2022 - vbulletin 4.x - SQLi in breadcrumbs via xmlrpc API post-auth ============================================================================ == Overview - -------- date : 10/12/2014 cvss : 7.1 AV:N/AC:H/Au:S/C:C/I:C/A:C base cwe : 89 vend...

vBulletin 5.x / 4.x Persistent Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2021 - vBulletin 5.x/4.x - persistent XSS in AdminCP/ApiLog via xmlrpc API post-auth ============================================================================ ==================== Overview - -------- date : 10/12/2014 cvss : 4.6...

vBulletin 4.x - breadcrumbs via xmlrpc API (Authenticated) SQL Injection

CVE-2014-2022 - vbulletin 4.x - SQLi in breadcrumbs via xmlrpc API post-auth ============================================================================== Overview -------- date : 10/12/2014 cvss : 7.1 AV:N/AC:H/Au:S/C:C/I:C/A:C base cwe : 89 vendor : vBulletin Solutions product : vBulletin 4...

[SECURITY] Fedora 19 Update: kdelibs-4.11.5-5.fc19

Libraries for KDE 4...

October 2014 Microsoft Patch Tuesday security bulletins

Microsoft on Tuesday will push out its first set of patches since it announced the dissolution of the Trustworthy Computing group that gave birth to Patch Tuesday. The monthly patch cycle was just one output from TwC, which was formed in the ashes of Code Red, Nimda and hundreds of other network...

CVE-2014-8068

CVE-2014-8068 affects Adobe Digital Editions 4.x. The issue is information disclosure: DE 4 does not encrypt data transmitted to adelogs.adobe.com, enabling network sniffing of sensitive information (e.g., book-navigation data). Affected platforms include Windows and macOS; older than 4.0.1 build...

PT-2014-5430 · Openstack · Openstack Neutron

Name of the Vulnerable Software and Affected Versions: openstack-neutron versions prior to 2014.1.2-4 Description: The default configuration in the sudoers file allows remote attackers to gain privileges via a crafted configuration file. This issue exists due to a regression. Recommendations: For...

Fedora 19 : nodejs-send-0.3.0-4.fc19 (2014-11495)

When relying on the root option to restrict file access it may be possible for an application consumer to escape out of the restricted directory and access files in a similarly named directory. For example, staticdirname + '/public' would allow access to dirname + '/public-restricted'...

CVE-2014-7278

The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00AADY.4C0 and earlier allows remote attackers to cause a denial of service persistent web-interface outage via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginM...

CVE-2014-7277

The ZyXEL SBG-3300 Security Gateway (firmware up to 1.00(AADY.4)C0) is affected by CVE-2014-7277, a Stored Server XSS in the login page. The vulnerability arises from improper handling of the loginMessage element during rendering of the login page, allowing remote attackers to inject arbitrary we...

CVE-2003-1598

WordPress 0.7 b2 cafelog code allows SQL injection. / Blog.header.php. $ posts not converted to an integer, so we can inject sql in this variable. In MySQL 4.x can use UNION and subselects to obtain privileges...

RHEL 4 / 5 / 6 : JBoss EWP (RHSA-2014:1320)

Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...

RHEL 5 / 6 : Red Hat JBoss Enterprise Application Platform 5.2.0 (RHSA-2014:1321)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1321 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications, which integrates the JBoss Application Server with...

CVE-2013-3083

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

CVE-2013-3083

CVE-2013-3083 is a CSRF flaw in Belkin F5D8236-4 v2 (cgi-bin/system_setting.exe) that lets remote attackers hijack administrator authentication to open the remote management interface on arbitrary ports via remote_mgmt_enabled and remote_mgmt_port. Impact per provided docs: authentication hijack;...

CVE-2013-3083

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

shoutbox-4-free.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50281 Description| Value ---|--- Affected Website:| shoutbox-4-free.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...