CVE-2018-6944

CVE-2018-6944 affects the WordPress plugin UltimateMember (version 2.0) where core/lib/upload/um-file-upload.php is vulnerable to cross-site scripting due to improper sanitization of input assigned to the $temp variable. This XSS vulnerability could allow injected JavaScript to be executed in the...

gomovies.co XSS vulnerability

Vulnerable URL: https://gomovies.co/?s=%22%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6944 VIP website status:| Yes...

Adobe Acrobat and Reader Use-After-Free Code Execution (APSB16-33: CVE-2016-6944)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-6944

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2015-6944

Cross-site request forgery CSRF vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp...

CVE-2014-6944

The CVE-2014-6944 entry concerns the mitfahrgelegenheit.at Android app (version 2.3.0). The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. C...

Fedora Update for mod_wsgi FEDORA-2014-6944

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-6944

CVE-2013-6944 is a cross-site scripting (XSS) vulnerability in the AAA TM vServer user interface of Citrix NetScaler ADC. Affected software includes Citrix NetScaler ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7, where remote attackers can inject arbitrary web scrip...

Viber Client Detection

Binary data 6944.prm...

SuSE 11.2 Security Update : bind (SAT Patch Number 6944)

The following issue has been fixed : - Specially crafted RDATA could have caused bind to lockup. This is a different flaw than CVE-2012-4244. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6944)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2008-6944

CVE-2008-6944 describes an unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds. Remote authenticated users could upload a file with an executable extension as a profile logo and then access it directly via cars_images/ to execute arbitrary code. The issue is caused by improper ...

CVE-2008-6944

creationtimestamp| type| source ---|---|--- 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7112 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7110 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7111...

Debian Security Advisory DSA 1370-2 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1370-2. OpenVAS Vulnerability Test $Id: deb13702.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1370-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1370-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1370-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1370-1. OpenVAS Vulnerability Test $Id: deb13701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1370-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1370-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 10th, 2007 http://www.debian.org/security/faq -...