326 matches found
Code injection
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...
CVE-2017-16670
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...
CVE-2017-18036
The vulnerability CVE-2017-18036 affects Atlassian Bitbucket Server, specifically the Github repository importer module, where a Server-Side Request Forgery (SSRF) in versions before 5.3.0 enables remote attackers to determine whether a non-reachable service has open ports. The root cause is an S...
CVE-2017-8440
Starting in version 5.3.0, Kibana had a cross-site scripting XSS vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...
Elastic Kibana X-Pack 'CVE-2017-8449' Insufficient Access Restriction Vulnerability - Linux
Elastic Kibana with X-Pack is prone to an insufficient access restriction vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WSO2 Identity Server XSS Vulnerability
WSO2 Identity Server is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2017-17793
Name of the Vulnerable Software and Affected Versions instack-undercloud versions 5.3.0 through 7.2.0 Description A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. This could allow a local user to conduct a symbolic-link attack,...
Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access
Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...
Elastic Kibana 'CVE-2017-8440' Cross-site scripting (XSS) Vulnerability - Windows
Elastic Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-8440
Starting in version 5.3.0, Kibana had a cross-site scripting XSS vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...
CVE-2017-8440
Starting in version 5.3.0, Kibana had a cross-site scripting XSS vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...
CVE-2017-8440
Starting in version 5.3.0, Kibana had a cross-site scripting XSS vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...
CVE-2017-8440
Kibana 5.3.0+ includes a cross-site scripting (XSS) vulnerability in the Discover page that could allow an attacker to obtain sensitive information or perform destructive actions on behalf of other Kibana users. The issue is confirmed across multiple vendor/security sources for Elastic Kibana. Th...
vBulletin Security Bypass Vulnerability
vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . A security bypass vulnerability exists in versions of vBulletin prior to 5.3.0. A remote attacker could exploit this vulnerability to conduct a server-side...
Joomla Akeeba Backup 5.2.5 Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla Component Akeeba Backup 5.2.5 - Directory Traversal Date: 2017-03-07 Home : https://extensions.joomla.org/extensions/extension/access-a-security/site-security/akeeba-backup/ Version : Akeeba Backup Core 5.3.0.b1 2017-02-2...
CVE-2016-7967
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...
CVE-2016-7968
CVE-2016-7968 affects KMail (KDE PIM) where a QWebEngine-based HTML mail viewer with JavaScript enabled could execute code in HTML mail content. Root cause: insufficient sanitization in the viewer, enabling JavaScript execution. Impact stated in sources centers on potential code execution via HTM...
Nagios XI 5.2.9 Cross Site Scripting / Open Redirect Vulnerabilities
Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ============== www.nagios.com Product: ================ Nagios XI v5.2.9 Nagios XI provides network, server, and application monitoring in one easy to configure package along with advanced alerting an...
