thedrum.com XSS vulnerability

Vulnerable URL: http://www.thedrum.com/jobs/search/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21788 Google Pagerank| 6 VIP website status:| Yes Check...

74cms jobs-list.php接口sql注入

首页 招聘信息 点击搜索 http://demo.74cms.com/jobs/jobs-list.php?sort=wage&page=1&jobcategory=&education=&citycategory=&experience=&settr=3&trade=&wage=&nature= 参数sort存在SQL注入...

Debian DLA-314-1 : cups security update

Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code. For Debian 6...

[SECURITY] [DLA 314-1] cups security update

Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...

SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...

DLA-314-1 cups - security update

Bulletin has no description...

PT-2015-7488

Name of the Vulnerable Software and Affected Versions SAP NetWeaver J2EE Engine version 7.40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the BP FIND JOBS WITH PROGRAM function module. Recommendations For SAP...

n-ix.com XSS vulnerability

Vulnerable URL: http://n-ix.com/careers/jobs/?page=%2Fcareers%2Findex.php%3Fm%3Dportal%26a%3Ddetails%26jobOrderID%3D5167887\%2527%253Clol%253E" Details: Description| Value ---|--- Patched:| Yes, at 27.08.2015 Latest check for patch:| 27.08.2015 23:02 GMT Vulnerability type:| XSS Vulnerability...

Fedora 21 : cups-x2go-3.0.1.3-1.fc21 (2015-10450)

New upstream version 3.0.1.2 : - cups-x2go,.conf: port to File::Temp. Use Text::ParseWords to split up the ps2pdf command line correctly. Don't use system but IPC::Open2::open2. Capture the ps2pdf program's stdout and write it to the temporary file handle 'manually'. Should fix problems reported...

MGASA-2015-0270 Updated cups-filters package fixes security vulnerability

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of...

DSA-3303-1 cups-filters - security update

Bulletin has no description...

FreeBSD : cups-filters -- texttopdf integer overflow (bf1d9331-21b6-11e5-86ff-14dae9d210b8)

Stefan Cornelius from Red Hat reports : An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

cups-filters -- texttopdf integer overflow

Stefan Cornelius from Red Hat reports: An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

FreeBSD : cups-filters -- buffer overflow in texttopdf size allocation (b19da422-1e02-11e5-b43d-002590263bf5)

Stefan Cornelius from Red Hat reports : A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execut...

Backup Copy Job Failures when using ExaGrid de-duplicating storage

Challenge Backup Copy Jobs can fail when writing to ExaGrid storage. Cause De-duplicating storage can incorrectly update existing backup files during Veeam "merge" operation. Solution Make sure your ExaGrid Storage firmware version is 4.7.0 P52 or newer. For additional information please contact...

[SECURITY] Fedora 20 Update: torque-4.2.10-3.fc20

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

[SECURITY] Fedora 22 Update: torque-4.2.10-3.fc22

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

[SECURITY] Fedora 21 Update: torque-4.2.10-3.fc21

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

CVE-2015-3355

Multiple cross-site request forgery CSRF vulnerabilities in the Batch Jobs module before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of certain users for requests that 1 delete a batch job record or 2 execute a task via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Batch Jobs module before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of certain users for requests that 1 delete a batch job record or 2 execute a task via unspecified vectors...