h5ai arbitrary file upload vulnerability

h5ai is a software developer Lars Jung developed a set of HTTP Web server for creating file indexing software. An arbitrary file upload vulnerability exists in versions of h5ai prior to 0.25.0. A remote attacker can exploit this vulnerability by uploading an executable file and sending a direct...

Unspecified Vulnerability in HP Software Update

HP Software Update is the automatic upgrade and patch software installed by default in laptops from Hewlett-Packard HP in the United States. An unspecified vulnerability in versions prior to HP Software Update 5.005.002.002 allows local users to gain privileges via unknown vectors...

Apache Tapestry Denial of Service Vulnerability

Apache Tapestry is the United States Apache Apache Software Foundation developed a set of frameworks used to create Java-based Web applications. A security vulnerability exists in Apache Tapestry versions prior to 5.3.6, which arises from the program's failure to check for tampering when storing...

DEBIAN-CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Multiple Cross-Site Scripting Vulnerabilities in eXtplorer

eXtplorer is based on PHP and Javascript file manager . Multiple cross-site scripting vulnerabilities exist in versions prior to eXtplorer 2.1.7, which can be exploited by remote attackers to inject arbitrary web script or HTML...

UBUNTU-CVE-2014-7945

OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document, related to j2k.c, jp2.c, and t2.c...

UBUNTU-CVE-2014-8635

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Openfire <= 3.6.2 'user-properties.jsp' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32938/info Openfire is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser ...

CVE-2014-2000

The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files...

UBUNTU-CVE-2014-1742

Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper...

Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)

Integer signedness error in the pixmanfillsse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows...

(SSH.com Communications) SSH Tectia - USERAUTH Change Request Password Reset (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...

DEBIAN-CVE-2012-2871

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document,...

JVN#92038939: mixi for Android information management vulnerability

mixi for Android provided by mixi, Inc. contains an issue which stores friends' comments on a SD card, therefore other applications can access this information directly from the SD card. Impact If a user of the affected product uses a malicious Android application, friends' comments may be...

UBUNTU-CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

SmartFTP Client Information Disclosure Vulnerability

This host is installed with SmartFTP Client and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsmartftpclientinfodiscvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SmartFTP Client Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright...

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...

UBUNTU-CVE-2010-2651

The Cascading Style Sheets CSS implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Joomla! 1.5.x - Multiple Modules 'search' Parameter Cross-Site Scripting Vulnerabilities

Joomla! 1.5.x Multiple Modules 'search' Parameter Cross-Site Scripting Vulnerabilities. CVE-2010-1649. Webapps exploit for php platform source: http://www.securityfocus.com/bid/40444/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

Rapidsendit Clone Script - 'admin.php' Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access t...