CVE-2018-5503

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

CVE-2018-5503

CVE-2018-5503 affects F5 BIG-IP PEM with content insertion actions in PEM policies. A crafted page processed through a virtual server can cause TMM to restart, yielding a remote DoS. Affected versions: BIG-IP PEM in 13.x (13.0.0–13.1.0.3) and 12.x (12.0.0–12.1.3.1). Fixes introduced in 13.x: 13.1...

CVE-2018-5503

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

CVE-2018-5503: Improper Input Validation

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

PT-2018-16997

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP versions 13.0.0 through 13.1.0.3 Description The issue occurs when the Traffic Management Microkernel TMM processes a specifically crafted page through a virtual server with an associated...

Directory Traversal

next is vulnerable to directory traversal attacks. Using the /next request namespace, attackers can insert .. into a string to access files outside of the intended directory. This doesn't affect users who have a static deployment through next export...

ImgHosting 1.5 - Cross-Site Scripting

ImgHosting 1.5 - Cross-Site Scripting Exploit Title: ImgHosting Image Storage System 1.5 - Cross-Site-Scripting Date: 12-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: foxsash.com Version: 1.5 CVE-ID: CVE-2018-5479 ImgHosting – Image Storag...

Authentication flaw

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in...

CVE-2018-3810

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in...

Schneider Electric Pelco VideoXpert Enterprise Elevation of Privilege Vulnerability

Pelco VideoXpert Enterprise is an enterprise video management system. An elevation of privilege vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, where an attacker can gain system privileges by replacing certain files and inserting code that will execute with the elevated...

Code execution vulnerability in OpenSNS backend AuthorizeController.class.php page

OpenSNS is a lightweight social user center framework based on OneThink. The system upholds a minimalist design style and focuses on communication. A code execution vulnerability exists in the AuthorizeController.class.php page in the OpenSNS backend. Allow attackers to exploit the vulnerability ...

Foxit Reader xfascriptobject Insertion Obfuscation Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the insert method of the XFAScriptObject object in Foxit Reader version 8.3.1.21155, which is caused by the program not properly validating user-submitted data. A remot...

CVE-2017-1433

IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803...

Razer US: XSS on Saved Carts page

The saved cart endpoint was vulnerable to a reflective XSS due to lack of sanitization of cartcode which is inserted back in the HTML document, which could allow execution of malicious Javascript on the client...

CVE-2017-14019

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her...

Oracle E-Business Suite Unauthorized Operation Vulnerability (CNVD-2017-32191)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle Interaction Center Intelligence is one o...

Unspecified Vulnerability in Oracle Knowledge Management Component (CNVD-2017-31059)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle Knowledge Management is one of the...

CVE-2017-1000102

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...

CVE-2017-1002006

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/savecontact.php doesn't check that the user is authorized before injecting new contacts into the wpcontact table...

NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting

NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linu...