2019 matches found
ALPINE-CVE-2016-10045
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOT...
PT-2022-24411 · Phpipam +1 · Phpipam +1
Name of the Vulnerable Software and Affected Versions: phpipam versions prior to 1.5.0 Description: A vulnerability has been found in phpipam, allowing for cross site scripting through the manipulation of an unknown functionality in the file app/admin/import-export/import-load-data.php of the...
DEBIAN-CVE-2016-9629
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
Google Chrome PDFium memory misreference vulnerability (CNVD-2016-12096)
Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in versions of Google Chrome prior to 55.0.2883.75. An attacker could exploit this vulnerability to cause a...
CVE-2016-9156
A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...
CVE-2016-2934
Cross-site scripting XSS vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
w3m arbitrary code execution vulnerability (CNVD-2016-11681)
w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...
w3m arbitrary code execution vulnerability (CNVD-2016-11715)
w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...
Schneider Electric Unity Pro Remote Code Execution Vulnerability
Schneider Electric Unity Pro is a suite of development software for testing, debugging and managing applications from the French company Schneider Electric. A remote code execution vulnerability exists in versions of Schneider Electric Unity Pro prior to V11.1. A remote attacker can exploit the...
PT-2017-7645 · Pacemaker +2 · Pcsd +2
Name of the Vulnerable Software and Affected Versions: pcsd versions prior to 0.9.149 Description: The issue is related to a cross-site request forgery CSRF vulnerability in the pcsd web UI. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
Google Chrome V8 Engine Arbitrary Code Execution Vulnerability
Google Chrome is the United States Google Google company developed a Web browser. Google V8 Engine is one of the open source JavaScript engine. An arbitrary code execution vulnerability exists in V8 Engine in versions of Google Chrome prior to 53.0.2785.143, which can be exploited by remote...
CVE-2016-8280
Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...
BMC BladeLogic Server Automation Information Disclosure Vulnerability
BMC BladeLogic Server Automation i.e. BSA is a suite of solutions for automated server management, control and configuration from BMC Software, Inc. An information disclosure vulnerability exists in BMC BladeLogic Server Automation versions prior to 8.8. A remote attacker could exploit this...
CVE-2016-5792
SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...
Google Chrome libxml2 Memory Misreference Vulnerability
Google Chrome is a web browsing tool developed by Google. A memory misreference vulnerability exists in Google Chrome versions prior to 52.0.2743.82 and prior to libxml2 2.9.4. A remote attacker can cause a denial of service by exploiting this vulnerability...
CVE-2016-6204
Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-3516
Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3514...
CVE-2016-1696
The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...