Joomla! 2.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 3.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

CVE-2017-7988

CVE-2017-7988 affects Joomla! prior to 3.7.0 (vulnerable: 1.6.0–3.6.5); root cause is inadequate filtering of form content, allowing an attacker to overwrite the author of an article. The issue is addressed in Joomla! 3.7.0. The vulnerability is listed among multiple Joomla! issues in Nessus plug...

CVE-2016-7988

The CVE describes an issue on Samsung Galaxy devices (S4–S7) where the BroadcastReceiver for com.[Samsung].android.intent.action.SET_WIFI lacks required permissions. This permits unsolicited configuration messages to be processed by wifi-service.jar within the Android Framework, as part of the vu...

CVE-2015-7988

The CVE-2015-7988 entry concerns Apple mDNSResponder, where the handle_regservice_request function before version 625.41.2 allows remote attackers to cause a crash (NULL pointer dereference) or execute code via unspecified vectors. Public analyses (SUSE/Security Bulletins, CERT notes, and NVD ent...

mDNSResponder contains multiple memory-based vulnerabilities

Overview mDNSResponder provides unicast and multicast mDNS services on UNIX-like operating systems such as OS X. mDNSResponder version 379.27 and above prior to version 625.41.2 is vulnerable to several buffer overflow vulnerabilities, as well as a null pointer dereference. Description CWE-120:...

CVE-2014-7988

CVE-2014-7988 affects the Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier. The vulnerability allows remote authenticated users to obtain sensitive information by reading logs (information disclosure due to sensitive data in logs, Bug CSCur06493). An attacker must authen...