15798 matches found
pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting
pfSense 2.4.4-p1 HAProxy Package 0.5914 - Persistent Cross-Site Scripting Exploit Title: pfSense 2.4.4-p1 HAProxy Package 0.5914 - Stored Cross-Site Scripting Date: 13.02.2019 Exploit Author: Gionathan "John" Reale Vendor Homepage: https://www.pfsense.org Version: 2.4.4-p1/0.5914 Software Link: N...
pfSense 2.4.4-p1 (HAProxy Package 0.59_14) Cross Site Scripting
Exploit Title: pfSense 2.4.4-p1 HAProxy Package 0.5914 - Stored Cross-Site Scripting Date: 13.02.2019 Exploit Author: Gionathan "John" Reale Vendor Homepage: https://www.pfsense.org Version: 2.4.4-p1/0.5914 Software Link: N/A Google Dork: N/A CVE:2019-8953 Introduction pfSenseAr software is a fre...
Denial of Service Vulnerability in Action View
There is a potential denial of service vulnerability in actionview. This vulnerability has been assigned the CVE identifier CVE-2019-5419. Impact ------ Specially crafted accept headers can cause the Action View template location code to consume 100% CPU, causing the server unable to process...
Jupyter Notebook Access Restriction Bypass Vulnerability
Jupyter Notebook is a suite of open source web applications for creating and sharing code and illustrative text documents. An access restriction bypass vulnerability exists in Jupyter Notebook, which can be exploited by an attacker to bypass access restrictions and obtain sensitive information...
XenMobile: How to Block Apple App Store and iTunes Store using restriction Policy
This article details how to block installing any Apps and music from the Apple App Store and iTunes store, respectively, on the iOS...
RSA Conference 2019: The Expanding Automation Platform Attack Surface
SAN FRANCISCO – Automation platforms are increasingly being used to chain multiple IoT devices together to create user-friendly smart applications – but that’s also creating unpredictable attack surfaces that can be hard to manage. A Trend Micro report released at RSA Conference 2019 warns that...
Security update for gdm (moderate)
openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2019:0310-1 Rating: moderate References: 1112294 1112578 1113245 1113700 1120307 1124628 Cross-References: CVE-2019-3825 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has 5 fixes is...
Code injection
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
CVE-2019-9573
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
CVE-2019-9573
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
CVE-2019-9573
The CVE-2019-9573 entry concerns the WordPress WP Human Resource Management plugin, specifically versions prior to 2.2.6. The public description states that the plugin mishandles leave applications, indicating a logic/authorization or data-handling issue in how leave requests are processed. CVSS ...
CVE-2019-9573
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
DEBIAN-CVE-2019-6226
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update
An update is now available for Red Hat JBoss Web Server 5.0 for RHEL 6 and Red Hat JBoss Web Server 5.0 for RHEL 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update
An update is now available for Red Hat JBoss Web Server 5.0 for RHEL 6 and Red Hat JBoss Web Server 5.0 for RHEL 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
What's New in Web Performance? - March 2019
Organizations that do business on the web are at various stages in their digital transformation journey. Some are developing some of the most innovative and immersive digital experiences on the web, others are, for the first time, figuring out how to safely move applications to the cloud with...
Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications...
[SECURITY] Fedora 28 Update: flatpak-1.0.7-1.fc28
flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...
Don’t Let Security Needs Halt Your Digital Transformation. Imperva FlexProtect Offers Agile Security for any Enterprise.
Is your enterprise in the midst of a digital transformation? Of course it is. Doing business in today’s global marketplace is more competitive than ever. Automating your business processes and infusing them with always-on, real-time applications and other cutting-edge technology is key to keeping...