Apache Struts 2.2.3 - Multiple Open Redirections

source: https://www.securityfocus.com/bid/61196/info Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can leverage these issues by constructing a crafted URI and enticing a user to follow it. Wh...

MS13-056: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187)

The remote Windows host is potentially affected by a vulnerability that could allow remote code execution if a user opens a malicious image file. Successful exploitation of this vulnerability could allow an attacker to gain the same user rights as the local user. C Tenable Network Security, Inc...

WordPress Plugin Category Grid View Gallery - ID Cross-Site Scripting

WordPress Plugin Category Grid View Gallery - ID Cross-Site Scripting source: https://www.securityfocus.com/bid/60905/info The Category Grid View Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker ma...

et-chat - Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability. An attacker can exploit these issues to gain elevated privileges within the application and upload arbitrary shells; this can result in an...

Fedora Update for kaccessible FEDORA-2013-10182

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 17 Update: kaccessible-4.10.4-1.fc17

Provides accessibility services like focus tracking and a screen reader...

ZamFoo - 'date' Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may also be affected...

ZamFoo - date Remote Command Injection

ZamFoo - date Remote Command Injection source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may...

Fedora Update for kaccessible FEDORA-2013-10130

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 18 Update: kaccessible-4.10.4-1.fc18

Provides accessibility services like focus tracking and a screen reader...

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion source: https://www.securityfocus.com/bid/60449/info HP Insight Diagnostics is prone to a local file include vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain...

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion

source: https://www.securityfocus.com/bid/60449/info HP Insight Diagnostics is prone to a local file include vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary loca...

[SECURITY] Fedora 19 Update: kaccessible-4.10.4-1.fc19

Provides accessibility services like focus tracking and a screen reader...

Caucho Resin - 'index.php?logout' Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info Resin Professional is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

HostBill - 'cpupdate.php' Authentication Bypass

source: https://www.securityfocus.com/bid/60958/info HostBill is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access to the affected application and disclose sensitive information. HostBill 4.6.0 is vulnerable; other versions may also be...

Python RRDtool Module - Function Format String

Python RRDtool Module - Function Format String / source: https://www.securityfocus.com/bid/60004/info The RRDtool module for Python is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary code...

WordPress Plugin Mail On Update - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59932/info The Mail On Update plugin for WordPress is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks...

WordPress Plugin WP Cleanfix - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59940/info The WP cleanfix plugin for WordPress is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are...

WordPress Plugin WP Super Cache - PHP Remote Code Execution

source: https://www.securityfocus.com/bid/59470/info The WP Super Cache plugin for WordPress is prone to a remote PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server. WP Super Cache 1.2 is vulnerable; other versio...

SMF - index.php HTML Injection Multiple PHP Code Injection Vulnerabilities

SMF - index.php HTML Injection Multiple PHP Code Injection Vulnerabilities source: https://www.securityfocus.com/bid/59409/info SMF is prone to an HTML-injection and multiple PHP code-injection vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on ...