Joomla Core com_admin Component SQL Injection (CVE-2018-6376)

A SQL injection vulnerability exists in Joomla Core comadmin component. The vulnerability is due to a lack of type casting on a variable used in a SQL statement. A remote attacker can exploit this vulnerability to escalate their privilege...

CVE-2018-6376

creationtimestamp| type| source ---|---|--- 2018-02-09 18:12:17+00:00| seen| https://t.me/canyoupwnme/3223 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2023-10-25 07:54:46+00:00| published-proof-of-concept|...

CVE-2018-6376

In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message...

CVE-2018-6376

In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message...

CVE-2018-6376

CVE-2018-6376 ( Joomla! ) describes a SQL injection vulnerability in the Hathor postinstall message due to the lack of type casting of a variable within a SQL statement in Joomla! versions prior to 3.8.4. Affected is Joomla! up to 3.8.3. Root cause: improper handling of input in SQL context leadi...

Cisco Wireless LAN Controller Multiple Vulnerabilities

According to its self-reported version, the remote Cisco Wireless LAN Controller WLC device is affected by multiple vulnerabilities : - A denial of service vulnerability exists in the traffic streams metrics TSM implementation using Inter-Access Point Protocol IAPP. An unauthenticated, adjacent...

CVE-2016-6376

Cisco WLC CVE-2016-6376 affects the Adaptive Wireless Intrusion Prevention System (wIPS) by failing to validate wIPS packets, enabling an unauthenticated, adjacent attacker to trigger a DoS and device restart. Affected firmware ranges include WLCs prior to 8.0.140.0, 8.1.x, 8.2.x prior to 8.2.121...

CVE-2016-6376

The Adaptive Wireless Intrusion Prevention System wIPS feature on Cisco Wireless LAN Controller WLC devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service device restart via a malformed wIPS packet, aka Bug ID...

Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability (cisco-sa-20151120-tvcs)

A vulnerability in Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to execute unwanted actions. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2015-6376

CVE-2015-6376 affects Cisco TelePresence Video Communication Server (VCS) X8.5.1 and is a cross-site request forgery (CSRF/XSRF) vulnerability that could allow an unauthenticated remote attacker to hijack user authentication. The root cause is lack of CSRF protections. Public references indicate ...

Oracle: Security Advisory (ELSA-2013-2587)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2014:0189-1)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to 3.0.101 and also includes various other bug and security fixes. A new feature was added : - supported.conf: marked net/netfilter/xtset as supported bnc851066fate313309 The following security bugs have been fixed : CVE-2013-4587:...

Fedora Update for kernel FEDORA-2014-16632

Check the version of kernel SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868583";...

CVE-2014-6329

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-6327 and CVE-2014-6376...

CVE-2014-6376

CVE-2014-6376 affects Microsoft Internet Explorer 11 and describes a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. The CVE is presented as a distinct vulnerability from CVE-2014-6327 and CVE-2014-6329. T...

MS14-080: Cumulative Security Update for Internet Explorer (3008923)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3008923. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6376)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Fedora Update for kernel FEDORA-2014-8487

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2014-8171

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : kernel (openSUSE-SU-2014:0205-1)

The Linux Kernel was updated to version 3.11.10, fixing security issues and bugs : - floppy: bail out in open if drive is not responding to block0 read bnc773058. - compatsysrecvmmsg X32 fix bnc860993 CVE-2014-0038. - HID: usbhid: fix sis quirk bnc859804. - hwmon: coretemp Fix truncated name of...