PT-2014-4607

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 12.x through 12.1.0 Description The issue allows remote attackers to cause a denial of service crash via a PJSIP endpoint that does not have an associated outgoing request, when qualify frequency is enabled on an...

Localize: ClickJacking

It allows remote attackers to do some clickjacking which can be used for adding arbitrary tasks . Why? Almost all of your page has missing X-FRAME-OPTIONS header. Websites are at risk of a clickjacking attack when they allow content to be embedded within a frame. An attacker may use this risk to...

CVE-2014-2431

Disclaimer: This data contains information about vulnerable...

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options...

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options...

CVE-2014-2431: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options...

MySQL 5.6.x < 5.6.17 Multiple Vulnerabilities

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.17. It is, therefore, potentially affected by vulnerabilities in the following components : - Client - InnoDB - Options - Performance Schema - RBR C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options...

PT-2014-1197 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.36 and earlier Oracle MySQL versions 5.6.16 and earlier Description: The issue affects the MySQL Server component in Oracle MySQL, allowing remote authenticated users to impact data availability using the Options...

UBUNTU-CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options...

IRCCloud: Missing X-Content-Type-Options

https://www.irccloud.com/?/addNetwork doesn't have a header settings for X-Content-Type Options which means it is vulnerable to MIME sniffing. The only defined value, "nosniff", prevents Internet Explorer and Google Chrome from MIME-sniffing a response away from the declared content-type. This al...

CVE-2013-2693

Cross-site request forgery CSRF vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unspecified vectors...

PT-2014-2665

Name of the Vulnerable Software and Affected Versions WP-PostViews plugin versions prior to 1.63 Description A cross-site request forgery CSRF issue exists in the options admin page of the WP-PostViews plugin, allowing remote attackers to hijack the authentication of administrators for requests...

CVE-2013-3252: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2693: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unspecified vectors...

Illegal TCP Options

TCP packet options may contain illegal values. Attackers can use specially crafted TCP packets for remote network attacks...

Cross site scripting

Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...

CVE-2012-1834

Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...

PT-2014-2236

Name of the Vulnerable Software and Affected Versions CMS Tree Page View plugin versions prior to 0.8.9 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the cms tpv view parameter to "wp-admin/options-general.php"...

C2FO: OPTIONS Method Enabled

Vulnerability Details:- I detected that OPTIONS method is allowed. This issue is reported as extra information. Impact:- Information disclosed from this page can be used to gain additional information about the target system. Remedy:- Disable OPTIONS method in all production systems. POC :- Reque...