577 matches found
Oracle MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities
Binary data 700063.prm...
JVN#40667528: Norton Download Manager may insecurely load Dynamic Link Libraries
Norton Download Manager provided by Symantec Japan, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privileges of the user running the application. Solution Use the latest Norton Download...
Command injection
EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...
CVE-2016-8216
EMC Data Domain OS (DD OS) exposes a local command injection vulnerability tracked as CVE-2016-8216. Affected are DD OS 5.4 across all versions, 5.5 family prior to 5.5.5.0, 5.6 family prior to 5.6.2.0, and 5.7 family prior to 5.7.2.10. The issue allows a local attacker to bypass the Data Domain ...
CVE-2017-3258
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...
MyBB 1.8.3 Remote Code Execution Exploit
Exploit for php platform in category web applications GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 - Release Date: 2017.1.20 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for...
PHP 5.6.x / MyBB 1.8.3 Remote Code Execution
GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 - Release Date: 2017.1.20 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for updating any already assigned properties of any already...
MyBB 1.8.3 (with PHP 5.6 5.6.11) - Remote Code Execution
MyBB 1.8.3 with PHP 5.6 5.6.11 - Remote Code Execution GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 - Release Date: 2017.1.20 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for...
MyBB < 1.8.3 (with PHP 5.6 < 5.6.11) - Remote Code Execution
GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 - Release Date: 2017.1.20 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for updating any already assigned properties of any already...
UBUNTU-CVE-2017-3313
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wher...
Internet Bug Bounty: GMP Deserialization Type Confusion Vulnerability [MyBB <= 1.8.3 RCE Vulnerability]
GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for updating any already assigned properties of any already created objects, this result ...
Oracle MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities
Binary data 9845.prm...
PHP 5.6.x < 5.6.30 Multiple Vulnerabilities
Binary data 9937.prm...
PHP 5.6.x < 5.6.29 DoS
Binary data 9841.prm...
PT-2016-3055 · Oracle +7 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.53 and earlier MySQL Server versions 5.6.34 and earlier MySQL Server versions 5.7.16 and earlier Description: The issue exists due to insufficient input validation in the MySQL Server component, specifically in the D...
MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities (January 2017 CPU)
The version of MySQL running on the remote host is 5.6.x prior to 5.6.35. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to cause a denial of service condition...
Internet Bug Bounty: Invalid parameter in memcpy function trough openssl_pbkdf2
Upstream: https://bugs.php.net/bug.php?id=72776 Summary: ------------ When keylength parameter is greater than 0x7fffffff, size parameter is interpreted as negative in memcpy, inside PKCS5PBKDF2HMAC function libcrypto.so. This issue happens only in PHP 5.6 branch. PHP 7.0 avoids this issue trough...
PHP 5.6.29 releases, security vulnerability fixes-bug warning-the black bar safety net
The PHP development team announced PHP 5.6.29 available. This is a safe version that fixes several security vulnerabilities. Suggested that all PHP 5.6 users upgrade to this version. Update content: Mysqlnd: Fixed bug 64526 the missing mysqlnd. Add parameters to the php. ini-. Opcache: Fixed bug...
PHP 5.6.x < 5.6.28 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.28. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the parseurl function due to returning the incorrect host. An unauthenticated, remote attacker can exploit this to hav...