5781 matches found
DSA-2659-1 libapache-mod-security - XML external entity processing vulnerability
Bulletin has no description...
SEC Consult SA-20130403-0 :: Multiple vulnerabilities in Sophos Web Protection Appliance
SEC Consult Vulnerability Lab Security Advisory 20130403-0 ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable version: = 3.7.8.1 fixed version: 3.7.8.2 impact: Critical CVE number:...
Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities
Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable version: = 3.7.8.1 fixed...
Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable version: = 3.7.8.1 fixed version: 3.7.8.2 impact: Critical CVE number: CVE-2013-2641,...
Pollen CMS 0.6 Local File Disclosure Vulnerability
Exploit for php platform in category web applications Title: Pollen CMS //core/lib/readimage.php?image=php urlencoded path to file 0day.today 2018-01-04...
Sophos Web Protection Appliance 3.7.8.1 XSS / Command Execution
Sophos Web Protection Appliance version 3.7.8.1 suffers from OS command injection, cross site scripting, and file disclosure vulnerabilities. ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable...
Sophos Web Appliance Web Interface Multiple Vulnerabilities (Feb 2013) - Active Check
Sophos Web Appliance Web Interface is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Pollen CMS 0.6 - index.php?p Paramete Local File Disclosure
Pollen CMS 0.6 - index.php?p Paramete Local File Disclosure Title: Pollen CMS //core/lib/readimage.php?image=php urlencoded path to file...
Pollen CMS 0.6 - 'index.php?p' Paramete' Local File Disclosure
Title: Pollen CMS //core/lib/readimage.php?image=php urlencoded path to file...
Pollen CMS 0.6 File Disclosure
Title: Pollen CMS = 0.6 - Local File Disclosure Google Dork: intext:"Powered by Pollen CMS" Date: 25 Mars 2013 Exploit Author: MizoZ Vendor Homepage: pollencms.com BROKEN Software Link: https://code.google.com/p/pollencms/ Version: 0.6 Tested on: Ubuntu Desktop 12.04 -- File...
roundcube -- arbitrary file disclosure vulnerability
RoundCube development team reports: After getting reports about a possible vulnerability of Roundcube which allows an attacker to modify its users preferences in a way that he/she can then read files from the server, we now published updated packages as well as patches that fix this security issu...
Open-Xchange Server 6 - Multiple Vulnerabilities
Open-Xchange Server 6 - Multiple Vulnerabilities Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible full disclosure to publish security issue details. Users of the software have already been provided with patched versions. Proof...
mnoGoSearch <= 3.3.12 Multiple Vulnerabilities - Active Check
mnoGoSearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net
Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...
SEC Consult SA-20130308-0 :: Multiple critical vulnerabilities in GroundWork Monitor Enterprise (part 1)
SEC Consult Vulnerability Lab Security Advisory 20130308-0 ======================================================================= title: Multiple critical vulnerabilities part 1 product: GroundWork Monitor Enterprise vulnerable version: 6.7.0 fixed version: none - optional technical bulletin...
McAfee Email Gateway 7.0 File Disclosure
File disclosure vulnerability in McAfee Email Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
GroundWork Monitor Enterprise contains multiple vulnerabilities
Overview GroundWork Monitor Enterprise 6.7.0 and possibly earlier versions contain multiple vulnerabilities. Description The SEC Consult Vulnerability Lab Security Advisory states:The following vulnerability description has been categorized into the components where the vulnerabilities have been...
Buffalo LinkStation Direct Request Remote File Disclosure
The web server included with the remote Buffalo LinkStation device does not properly configure access rights, which allows an unauthenticated remote attacker to gain access to sensitive files such as the device's private RSA key. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Piwigo <= 2.4.6 Arbitrary File Disclosure and Arbitrary File Deletion Vulnerabilities
Piwigo is prone to an arbitrary file-disclosure vulnerability and an arbitrary file-deletion vulnerability because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
PHPMyGallery 1.51.010 XSS / Local File Disclosure
. . || || || | \ \ / | |/ // /\ \ \ |/ \ / / | |/ | | \ |\ \ \ \ / | | / \ / \ \ /| /| // /| ||\ | / / / / / / / www.janissaries.org ===================================================================== xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...