PT-2015-5670

Name of the Vulnerable Software and Affected Versions WonderPlugin Audio Player plugin version 2.0 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can...

PT-2015-5660

Name of the Vulnerable Software and Affected Versions WonderPlugin Audio Player plugin versions prior to 2.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter in a wonderplugin audio save item action to /wp-admin/admin-ajax.php or...

CVE-2015-2102: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...

PT-2015-5609

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.7 RC3 2.7.0.4.v2929-rc3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the item parameter in the view item.php file. Recommendations For ClipBucket version 2.7 RC3...

DEBIAN-CVE-2014-1569

The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...

Thomson Reuters Fixed Assets CS 13.1.4 - Local Privilege Escalation

Thomson Reuters Fixed Assets CS 13.1.4 - Local Privilege Escalation Exploit Title: Thomson Reuters Fixed Assets CS Windows 7, Windows 8 CVE : 2014-9141 Product Affected: Fixed Assets CS =13.1.4 Workstation Install Note: 2003/2008 Terminal Services/Published apps may be vulnerable, depending on...

Folder Plus 2.5.1 iOS - Persistent XSS Vulnerability

No description provided by source. Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID:...

Folder Plus v2.5.1 iOS - Persistent Item Vulnerability

Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 134...

Folder Plus v2.5.1 iOS - Persistent Item Vulnerability

Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 134...

CVE-2014-7118

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7118

The CVE-2014-7118 entry concerns the Itography Item Hunt (com.itography.application) Android app version 3.0.3, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certi...

CVE-2014-7118

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7118: Undefined Security Weakness

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8455

Name of the Vulnerable Software and Affected Versions C97net Cart Engine versions prior to 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the item id variable in the sql query function in cart.php. The vulnerability can be exploited using...

CVE-2014-6543

Technical details for CVE-2014-6543 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2014-6543

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to ITEM Item & BOM...

PT-2014-7278

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.3 Description The issue affects confidentiality and integrity, and it is related to the ITEM Item & BOM component. Remote authenticated users can exploit this issue. Recommendations For Oracle...

CVE-2014-6543: Undefined Security Weakness

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to ITEM Item & BOM...

Twiki Perl 4.x, 5.x, 6.x Upload Bypass / Code Execution Vulnerabilities

The debugenableplugins request parameter in Twiki versions 4.x, 5.x, and 6.0.0 allows arbitrary Perl code execution and suffer from a file upload bypass vulnerability. This is an advisory for TWiki administrators: The debugenableplugins request parameter allows arbitrary Perl code execution...