3307 matches found
November 27, 2017—KB4051034 (Preview of Monthly Rollup)
None None...
November 27, 2017—KB4050946 (Preview of Monthly Rollup)
None None...
November 22, 2017—KB4055254 (OS Build 15063.729)
None None...
November 21, 2017—KB4055038
None None...
CVE-2017-11879
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability"...
expatriates.com XSS vulnerability
Open Bug Bounty ID: OBB-413939 Description| Value ---|--- Affected Website:| expatriates.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
PyAnyAPI Command Execution Vulnerability
PyAnyAPI is a Python-based tool for creating interfaces on multiple types of data using a declarative approach. A security vulnerability exists in the YAML parsing functionality of the Interfaces.py file in versions of PyAnyAPI prior to 0.6.1. An attacker can exploit this vulnerability by injecti...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35597)
ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the GraphicalView.do...
Apache Storm Directory Traversal Vulnerability
Apache Storm is the United States Apache Apache Software Foundation of a set of Clojure Concurrent Programming Language development of free open-source distributed real-time computing system. log viewer is one of the log viewer tool. A directory traversal vulnerability exists in the log viewer in...
UBUNTU-CVE-2017-16248
The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character...
Online Exam Test Application SQL Injection Vulnerability
Online Exam Test Application is an online exam management system. A SQL injection vulnerability exists in Online Exam Test Application. An attacker can perform SQL injection via the resources.php sort parameter in a category operation to obtain sensitive database information...
CVE-2014-3744
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...
UBUNTU-CVE-2014-3744
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...
CVE-2017-15220
Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code...
dot.wp.pl Open Redirect vulnerability
Vulnerable URL: http://dot.wp.pl/redir?SN=mailingmoneynews=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 03.01.2018 Vulnerability type:| Open Redirect Vulnerabili...
Mai Dot Mall App has SMS Bombing Vulnerability
MacDot Mall APP is an online shopping software. There is a SMS bombing vulnerability in MaiDot Mall APP. The attacker consumes server resources and causes denial of service by sending unlimited CAPTCHAs to cell phones...
Multiple cross-site scripting vulnerabilities in Dolibarr ERP/CRM (CNVD-2017-32849)
Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities...
mpg123 'INT123_parse_new_id3' function integer overflow vulnerability
mpg123 on 32-bit platforms is a MPEG audio player and decoding library for 32-bit operating systems developed by software developer Michael Hipp.ID3 parser is one of the ID3 parsers. An integer overflow vulnerability exists in the 'INT123parsenewid3' function of the ID3 parser in versions of mpg1...
July 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1: July 18, 2017
July 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1: July 18, 2017 View products that this article applies to. Summary This article lists the Quality Rollups for the .NET Framework...