CVE-2015-9016

CVE-2015-9016 : In the upstream Linux kernel, the use-after-free race in blk_mq_tag_to_rq (blk-mq.c) can occur when a request was already freed by blk_mq_complete_request . This race enables local escalation of privilege on affected systems, with the Android kernel explicitly mentioned as impacte...

CVE-2018-9016

The CVE-2018-9016 entry corresponds to a cross‑site scripting (XSS) vulnerability in dsmall v20180320, exploitable via the main page search box (public/index.php/home). The CNVD entry explicitly notes that a remote attacker can inject arbitrary HTML/JavaScript to obtain sensitive information. The...

CVE-2018-9016

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...

CVE-2016-9016

Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

CVE-2016-9016

Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

UBUNTU-CVE-2016-9016

Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

CVE-2016-9016

Firejail 0.9.38.4 is affected by a local privilege escalation vulnerability. A local user can execute arbitrary commands outside the sandbox by sending a crafted TIOCSTI ioctl, bypassing sandboxing protections. The flaw is described as a local-exploit involving TIOCSTI, enabling command execution...

Aegir - Moderately Critical - Code Execution Prevention - SA-CONTRIB-2015-113

The Aegir Hosting System enables you to deploy and manage Drupal sites. When writing Apache vhost files for hosted sites on a common platform multi-site, Aegir doesn't block execution of code uploaded to another site on the same platform. This vulnerability is mitigated by the fact that an attack...

Fedora 21 : drupal7-7.34-1.fc21 (2014-15583)

Drupal 7.34, 2014-11-19 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 19 : drupal7-7.34-1.fc19 (2014-15522)

Drupal 7.34, 2014-11-19 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for drupal7 FEDORA-2014-15522

Check the version of drupal7 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868537";...

Fedora Update for drupal7 FEDORA-2014-15528

Check the version of drupal7 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868536";...

wp_drupal_timing_attack

wpdrupaltimingattack ==...

Drupal / WordPress Memory Exhaustion

==================================================================== DESCRIPTION: ==================================================================== A vulnerability present in Wordpress novaliduserpayload && printf "%s" 1..1000000 novaliduserpayload && echo -n "&op=Log in&formid=userlogin"...

[SECURITY] [DSA 3075-1] drupal7 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3075-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 20, 2014 http://www.debian.org/security/faq -...

Updated drupal packages fix security vulnerabilities

Updated drupal packages fix security vulnerability: Aaron Averill discovered that a specially crafted request can give a user access to another user's session, allowing an attacker to hijack a random session CVE-2014-9015. Michael Cullum, Javier Nieto and Andres Rojas Guerrero discovered that the...

Design/Logic Flaw

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...

CVE-2014-9016

CVE-2014-9016 affects Drupal 7.x prior to 7.34 and the Secure Password Hashes (phpass) module 6.x-2.x prior to 6.x-2.1. The issue is a denial-of-service condition caused by the password hashing API, where a crafted request can exhaust CPU and memory. Remediation is to update to Drupal 7.34+ and p...

Drupal 6.x < 6.34 / 7.x < 7.34 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.34 or 7.x prior to 7.34. It is, therefore, potentially affected by the following vulnerabilities : - There exists an unspecified flaw that is triggered when handling a specially crafted request that may allow a remote...