409 matches found
PostgreSQL Multiple Vulnerabilities (Mar 2017) - Windows
PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
ISC BIND RTYPE ANY Query Denial of Service Vulnerability - Linux
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
PostgreSQL 9.1.x < 9.1.24 / 9.2.x < 9.2.19 / 9.3.x < 9.3.15 / 9.4.x < 9.4.10 / 9.5.x < 9.5.5 / 9.6.x < 9.6.1 Aggregate Functions Use-after-free DoS
The version of PostgreSQL installed on the remote host is 9.1.x prior to 9.1.24, 9.2.x prior to 9.2.19, 9.3.x prior to 9.3.15, 9.4.x prior to 9.4.10, 9.5.x prior to 9.5.5, or 9.6.x prior to 9.6.1. It is, therefore, affected by a denial of service vulnerability due to a use-after-free error when...
McAfee Security Information and Event Management 9.5.x / 9.6.x < 9.6.0.3 ESM Authentication Bypass (KB87744)
According to its self-reported version, the McAfee Security Information and Event Management SIEM application installed on the remote host is 9.5.x or 9.6.x prior to 9.6.0.3. It is, therefore, affected by an authentication bypass vulnerability in the Enterprise Security Manager ESM component due ...
EMC RSA Data Loss Prevention Clickjacking Vulnerability
EMC RSA Data Loss Prevention monitors network traffic and protects against data loss. A clickjacking vulnerability exists in EMC RSA Data Loss Prevention versions prior to 9.6 SP2 P5, which could allow a remote attacker to execute a clickjacking attack via constructed web site elements...
CVE-2016-0893
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...
Design/Logic Flaw
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...
CVE-2016-0892
Cross-site scripting XSS vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-0894
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...
CVE-2016-0893
CVE-2016-0893 affects EMC RSA Data Loss Prevention 9.6 prior to SP2 P5. The issue allows remote authenticated users to obtain sensitive information by reading error messages, indicating information disclosure through error handling. The provided connected documents confirm the affected product an...
CVE-2016-0894
The CVE affects EMC RSA Data Loss Prevention 9.6 before SP2 P5. A remote authenticated user can bypass object access restrictions by modifying a parameter, indicating an improper access-control validation in the affected component. Remediation: upgrade to EMC RSA DLP 9.6 SP2 P5 or apply the relev...
PT-2015-3351
Name of the Vulnerable Software and Affected Versions Omron CX-One CX-Programmer versions prior to 9.6 Omron CJ2M PLC devices versions prior to 2.1 Omron CJ2H PLC devices versions prior to 1.5 Description The issue is related to the transmission of passwords in cleartext, which can be exploited b...
CVE-2015-6512
SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...
Sql injection
SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...
CVE-2015-6512
CVE-2015-6512 describes a SQL injection in FreiChat 9.6 via the time parameter to server/freichat.php, in the get_messages function of server/plugins/chatroom/chatroom.php. The vulnerability arises from inadequate input filtering, allowing remote attackers to execute arbitrary SQL commands. Sever...
FreiChat 9.6 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.p...
SUSE SLES10 Security Update : bind (SUSE-SU-2015:0488-1)
This bind update to version 9.6-ESV-R11-W1 fixes the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...
[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities
Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...
CVE-2014-5361
CVE-2014-5361 and related CSRF/RFI vulnerabilities affect LANDESK Management Suite 9.5 and 9.6, enabling remote attackers to hijack administrator sessions and perform actions such as starting, stopping, or restarting services via the admin interface (remote/serverServices.aspx) due to CSRF and RF...
Landesk Management Suite 9.5 Cross Site Scripting
CVE-2014-5360 Landesk Management Suite XSS Cross-Site Scripting Security Vulnerability Exploit Title: Landesk Management Suite Cross-Site scripting vulnerability Product: Landesk Management Suite Vulnerable Versions: 9.5 possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: Fe...