1092 matches found
CVE-2021-22995
On all 7.x and 6.x versions fixed in 8.0.0, BIG-IQ high availability HA when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development EoSD are not evaluated...
Ovidentia CMS SQL Injection Vulnerability
Ovidentia is an open source content management system and multi-user collaboration platform . It is written in PHP , and uses MYSQL as its database . It can be simple and easy to integrate a content can be published on the WEB environment or a portal component of the company , organization ,...
Remote code execution
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution...
Hotfix WSS11E001 - For XenServer 6.x with WebSelfService
BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...
Ruby on Raily < 5.2.4.3, 6.x < 6.0.3.1 Multiple Vulnerabilities - Linux
Ruby on Rails is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rubyonrails:rails";...
CVE-2020-12459
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml which contain a secretkey and a bindpassword are world readable...
CVE-2019-16375
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious...
CVE-2019-4457
The CVE-2019-4457 entry relates to IBM Jazz Foundation 6.0.x (including 6.0.6.1) where an authenticated user could obtain sensitive information. Connected IBM security bulletin confirms the issue affects multiple CLM/Rational products built on IBM Jazz technology and labels it as an information d...
xglance-bin 11.00 - Privilege Escalation Exploit
Exploit Title: xglance-bin 11.00 - Privilege Escalation Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More details on...
CVE-2011-2715
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...
Sql injection
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...
CVE-2011-2715
Drupal 6.20 with Data 6.x-1.0-alpha14 is affected by an SQL Injection vulnerability caused by insufficient sanitization of table names or column names. The flaw can compromise data confidentiality and integrity (per CVE description). The connected records corroborate this issue across multiple so...
CVE-2011-2715
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...
CVE-2011-2714
A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display...
Red Hat JBoss Enterprise Application Platform 6.x < 6.4.22 Multiple Vulnerabilities
The version of Red Hat JBoss Enterprise Application Platform EAP installed on the remote host is 6.x prior to 6.4.22. It is therefore, affected my multiple vulnerabilities as referenced in the RHSA-2019:1162 advisory: - admin-cli: wildfly-core: Cross-site scripting XSS in JBoss Management Console...
Security Bulletin: Vulnerability in IBM JAVA 7 affect IBM UrbanCode Release (CVE-2016-2183)
Summary Vulnerability in IBM JAVA 7 affect IBM UrbanCode Release. Vulnerability Details IBM UrbanCode Release has addressed the following vulnerability: CVEID: CVE-2016-2183 DESCRIPTION: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products,...
CVE-2018-17860
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1...
Design/Logic Flaw
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1...
Oniguruma Heap Buffer Over Read Vulnerability
Oniguruma is an open source regular expression library. A heap buffer over-read vulnerability exists in the 'gb18030mbcenclen' function of the gb18030.c file in versions 6.x prior to Oniguruma 6.9.4rc2. The vulnerability stems from a networked system or product performing operations in memory...