zeemaps.com XSS vulnerability

Vulnerable URL: http://www.zeemaps.com/view?group=1=...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 23 Update: kf5-kitemmodels-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item models...

[SECURITY] Fedora 23 Update: kf5-kitemviews-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemviews-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemmodels-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item models...

TeamPass SQL Injection Vulnerability (CNVD-2016-04930)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass has a SQL injection vulnerability in sources/items.series.php. In a "sendemail" request, when the condition "$POST'cat' == "sharethisitem"" is successful, the POST parameter "id" is unescaped, which can lead to SQL...

UBUNTU-CVE-2016-2335

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service out-of-bounds read or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file...

Tiny Tiny RSS SQL Injection Vulnerability

A blind injection vulnerability exists in $itemid in Tiny Tiny RSS processcategoryorder. An attacker is able to connect to the library database and execute database statements...

Secure Item Hub Persistent Input Validation Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. A persistent input validation vulnerability exists in Secure Item Hub, which could allow a remote attacker to inject malicious persistent script code on the application side of the mobile a...

Secure Item Hub Local Command Injection Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. A local command injection vulnerability exists in Secure Item Hub, which could allow an attacker to execute malicious attack requests via persistent injection of script code...

Secure Item Hub Arbitrary File Upload Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. Secure Item Hub has an arbitrary file upload vulnerability that can be exploited by remote attackers to upload files and obtain sensitive information...

CVE-2015-8606

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Locale or 2 FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm...

CVE-2015-8606: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Locale or 2 FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm...

DEBIAN-CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

ALPINE-CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

UBUNTU-CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

IBM Maximo Asset Management SHIPREC Bypass Restriction Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A security...

graphite2: Heap-based buffer overflow in context item handling functionality

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...