CVE-2015-3360

CVE-2015-3360 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed Term Merge module for 7.x-1.x prior to 7.x-1.2. The issue arises because user input is not sufficiently filtered under certain conditions, allowing remote authenticated users to inject arbitrary web scrip...

Drupal Term Merge Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Term Merge module because it fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary script code ...

Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)

A denial of service vulnerability has been reported in the moddav component of Apache HTTP Server. The vulnerability is due to a NULL pointer dereference when processing a MERGE request with a URI whose source href points to a non-DAV configured URI. A remote attacker can send a crafted HTTP...

Low: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Updated qemu-kvm-rhev packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Null pointer dereference

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

UBUNTU-CVE-2014-3581

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1281 Video: https://www.youtube.com/watch?v=9gBtJ5tyRgI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1280 Vulnerabili...

Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1281 Video: https://www.youtube.com/watch?v=9gBtJ5tyRgI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1280 Vulnerabili...

Apache 2.4.7 httpd mod_status Heap Buffer Overflow Vulnerability

Exploit for linux platform in category dos / poc URL: http://svn.apache.org/r1610499 Log: Merge 1610491 from trunk: SECURITY CVE-2014-0226: Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. Thanks to Marek Kroemeke working with HP's Zero Day Initiative for...

Microsoft Excel Merge Cell Record Pointer Code Execution (MS10-080) - Ver2 (CVE-2010-3237)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

[GoLismero v2.0] Merge results of security tools (OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer...)

GoLismero is an Open Source security tools that can run their own security tests and manage a lot of well known security tools OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer... take their results, feedback to the rest of tools and merge all of results. And all of this automatically. Changelog...

CVE-2010-3090

Merged into CVE-2010-3089; the connected documents confirm this issue is a GNU Mailman XSS vulnerability affecting multiple versions prior to 2.1.14rc1, and/or related 2.1.14.x fixes. CVE-2010-3090 itself is not an active separate entry. Affected context references indicate XSS via list fields an...

OTRS < 2.3.0-beta4 Merge Operations Restriction Bypass Vulnerability

Open Ticket Request System OTRS is prone to a restriction bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav

moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...

httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav

moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...

httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav

moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...

Apache HTTP Server 'mod_dav_svn' Denial of Service Vulnerability - Windows

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CentOS Update for httpd CESA-2013:1156 centos6

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2013:1156 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...