Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-1064)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3582

A Cross-site Request Forgery CSRF vulnerability exists in Advanced Electron Forums AEF through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions...

CVE-2011-3582

CVE-2011-3582 affects Advanced Electron Forums (AEF) up to version 1.0.9. The issue is a Cross-site Request Forgery (CSRF) vulnerability caused by inadequate confirmation for sensitive administrator actions. The description across sources confirms the admin function CSRF exposure, with no explici...

CVE-2011-3582

A Cross-site Request Forgery CSRF vulnerability exists in Advanced Electron Forums AEF through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions...

PT-2020-7119

Name of the Vulnerable Software and Affected Versions Advanced Electron Forums AEF versions 1.0.0 through 1.0.9 Description A Cross-site Request Forgery CSRF issue exists due to inadequate confirmation for sensitive transactions in the administrator functions. Recommendations For versions 1.0.0...

CVE-2011-3582: Cross-Site Request Forgery (CSRF)

A Cross-site Request Forgery CSRF vulnerability exists in Advanced Electron Forums AEF through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions...

openSUSE Security Update : php7 (openSUSE-2020-80)

This update for php7 fixes the following issues : - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class bsc1159923. - CVE-2019-11046: Fixed an information leak in bcshiftaddsub bsc1159924. - CVE-2019-11047, CVE-2019-11050: Fixed...

Windows Privilege Escalation

Vulnerabilities of Windows operating systems are related to bypassing security functions. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

CVE-2020-7227

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...

CVE-2011-2934

A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in the reorder administrator functions in sNews 1.71...

CVE-2011-2934

A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...

CVE-2011-2706: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in the reorder administrator functions in sNews 1.71...

CVE-2011-2934: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions...

PT-2020-7113

Name of the Vulnerable Software and Affected Versions WebsiteBaker versions 2.8.1 and earlier Description A Cross Site Request Forgery CSRF issue exists in the administrator functions due to inadequate confirmation for sensitive transactions. Recommendations For versions 2.8.1 and earlier, consid...

PT-2020-7108

Name of the Vulnerable Software and Affected Versions sNews version 1.71 Description A Cross-Site Scripting XSS issue exists in the reorder administrator functions. This allows for potential malicious script execution. Recommendations For sNews version 1.71, at the moment, there is no information...

OPENSUSE-SU-2020:0014-1 Security update for php7-imagick

This update for php7-imagick fixes the following issues: Upgrade to version 3.4.4: Added: function Imagick::optimizeImageTransparency METRICSTRUCTURALSIMILARITYERROR METRICSTRUCTURALDISSIMILARITYERROR COMPRESSIONZSTD - https://github.com/facebook/zstd COMPRESSIONWEBP CHANNELCOMPOSITEMASK...

libld Heap Buffer Overflow DoS

The vulnerability of the libld component in the library that provides system calls and core functions in glibc is related to insufficient input data validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted ELF file...

Siemens S7-1200 unsafe function UART DoS

The vulnerability of Siemens S7-1200 microprogramming software is related to the presence of unsafe functions during physical connection via the UART interface. Exploiting this vulnerability can allow an attacker to obtain additional diagnostic information during the device loading process...