WordPress iThemes Security Insecure Backup / Logfile Generation

-------------------------------------- ISSUE 1: Wordpress iThemes Security Better WP Security Insecure Backup/Logfile Generation access rights ================================================================================================== Description =========== A vulnerability has been found ...

Google Chrome < 50.0.2661.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 50.0.2661.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201604stable-channel-update13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attacke...

IIS Short Name Scanner - Scanner For IIS Short File Name Disclosure Vulnerability (using the tilde [~] character)

Scanner for IIS short file name 8.3 disclosure vulnerability by using the tilde character. Description Microsoft IIS contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered during the parsing of a request that contains a tilde character . This may allow a...

CVE-2016-0754

cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name...

CVE-2016-0754

cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name...

commons-fileupload: Arbitrary file upload via deserialization

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...

DEBIAN-CVE-2015-7758

Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a 1 .aux, 2 .log, 3 .out, 4 .pdf, or 5 .toc extension for the file name, as demonstrated by .thesis.tex.aux...

UBUNTU-CVE-2015-8917

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid character in the name of a cab file...

MS15-130: Security update for Microsoft Uniscribe to address remote code execution: December 8, 2015

None None...

DEBIAN-CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...

UBUNTU-CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...

The vulnerability of the web application for data synchronization with ownCloud allows a perpetrator to trigger a service failure.

The vulnerability of file name handlers in web applications for data synchronization with ownCloud is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by assigning a specific file name...

ownCloud Server Denial of Service Vulnerability

ownCloud Server is a free and open source personal cloud storage solution created by German KDE developer Frank Karlitschek; ownCloud Server is a server edition. A denial of service vulnerability exists in ownCloud Server versions prior to 6.0.8, 8.0.x versions prior to 8.0.4 and 7.0.x versions...

ownCloud Server Cross-Site Scripting Vulnerability

ownCloud Server is a free and open source personal cloud storage solution created by German KDE developer Frank Karlitschek. ownCloud Server is a server version. A cross-site scripting vulnerability exists in ownCloud Server versions prior to 7.0.5 and 8.0.4 and prior to 8.0.x. The vulnerability...

Design/Logic Flaw

The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $GET parameters cast by PHP to an array, which allows remote attackers to cause a denial of service infinite loop and log file consumption via crafted endpoint...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2015-06712)

Revive Adserver is an open source ad management system from the Revive Adserver team. A cross-site scripting vulnerability exists in the plugin upgrade form of Revive Adserver versions prior to 3.2.2, which can be exploited by a remote attacker to inject arbitrary Web script or HTML with the help...

Mageia: Security Advisory (MGASA-2015-0352)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the NX-OS network operating system allows a hacker to execute arbitrary operating system commands.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands on the operating system by using special symbols in file names...

PT-2016-3297 · Gnu +3 · Gnu Tar +3

Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...

Oracle: Security Advisory (ELSA-2015-3054)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...