USN-3391-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting XSS attacks, bypass sandbox restrictions, obtain sensitive information, spoof the origin of modal...

Mozilla Firefox < 55 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 55. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable application crashes. C Tenable Network Security, Inc. include'compat.inc'; if...

CVE-2015-7780

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...

CVE-2015-7780

CVE-2015-7780 affects ManageEngine Firewall Analyzer prior to version 8.0 and is described as a directory traversal/local file inclusion vulnerability. Multiple sources indicate an unauthenticated/authenticated path to read arbitrary server files via traversal, enabling potential information disc...

CVE-2016-7780

CVE-2016-7780 affects Exponent CMS up to version 2.3.9. The vulnerability is a SQL injection in cron/find_help.php where the version parameter can be controlled to execute arbitrary SQL commands. Mitigation/repair exists in the project; a fix is provided in the Exponent CMS repository (commit a8e...

Exponent CMS 2.3.9 SQL Injection Vulnerability

Exploit for php platform in category web applications Exponent CMS 2.3.9 SQL Injection Vulnerability Disclose 10 cve in Exponent CMS CVE-2016-7780 In the line 42 of cron/findhelp.php , $GET'version' can be controlled and injected. It is possible to time-based blind SQL Inject by the param of...

CVE-2014-7780

The Pakistan Cricket News aka com.conduit.appcf18df8bdf454eb0a836e2d29886bc40.app application 1.21.38.6504 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7780

CVE-2014-7780 affects the Android app “Pakistan Cricket News” (package com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app), version 1.21.38.6504. The root cause is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof serve...

Fedora Update for python-pycadf FEDORA-2014-7780

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 11 FEDORA-2009-7780 (wxGTK)

The remote host is missing an update to wxGTK announced via advisory FEDORA-2009-7780. OpenVAS Vulnerability Test $Id: fcore20097780.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7780 wxGTK Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...