2504 matches found
CVE-2016-10037
MODX Revolution
CVE-2016-10038
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...
CVE-2016-10039
MODX Revolution is affected by CVE-2016-10039 (pre-2.5.2-pl). A directory traversal flaw exists in /connectors/index.php where a crafted dir parameter can cause local file inclusion/traversal/manipulation. The vulnerability is exploitable remotely via standard network access and is tied to the br...
Design/Logic Flaw
An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file e.g. an image which gets displayed at the portal application. Using script code at the file name leads t...
CVE-2016-9156
A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...
CVE-2016-9156
Siemens SICAM PAS is affected (all versions prior to 8.09). A remote attacker could upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP. Mitigation: upgrade SICAM PAS to version 8.09 or later; apply network access controls t...
WordPress Plugins Leave Online Shoppers Vulnerable
Researchers are calling into question the safety of some of the top WordPress e-commerce plugins used on over 100,000 commercial websites prepping for Black Friday and Cyber Monday online sales. In reviewing the top 12 WordPress e-commerce plugins, application security testing firm Checkmarx foun...
Atlassian Crucible Server < 3.10.0 Multiple Vulnerabilities
Binary data 9782.prm...
Security vulnerabilities fixed in Firefox ESR 45.5 — Mozilla
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. Thi...
Microsoft Virtual Hard Disk Driver Multiple Vulnerabilities (3199647)
This host is missing an important security update according to Microsoft Bulletin MS16-138. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VHD Driver Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Virtual Hard Disk Drive fails to properly handle user access to certain files. An attacker who successfully exploited the vulnerability could manipulate files in locations not intended to be available to the user. To exploit the...
Oracle MySQL 5.6.x < 5.6.34 Multiple Vulnerabilities
Binary data 9748.prm...
[SECURITY] [DSA 3702-1] tar security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3702-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 01, 2016 https://www.debian.org/security/faq -...
Remote code execution
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...
CVE-2016-1000031
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...
CVE-2016-1000031
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...
CVE-2016-1000031
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...
Fedora 23 : php (2016-0729e59542)
13 Oct 2016 - PHP version 5.6.27 Core: - Fixed bug php73025 Heap Buffer Overflow in virtualpopen of zendvirtualcwd.c. cmb - Fixed bug php73058 crypt broken when salt is 'too' long. Anatol - Fixed bug php72703 Out of bounds global memory read in BFcrypt triggered by passwordverify. Anatol - Fixed...
Advantech WebAccess Vulnerabilities
OVERVIEW Ilya Karpov of Positive Technologies, Ivan Sanchez, Andrea Micalizzi, Ariele Caltabiano, Fritz Sands, Steven Seeley, and an anonymous researcher have identified multiple vulnerabilities in Advantech WebAccess application. Many of these vulnerabilities were reported through the Zero Day...