33189 matches found
Mozilla Thunderbird ESR and Thunderbird Design Vulnerabilities
Mozilla Thunderbird is a stand-alone email client developed by the Mozilla Foundation from the Mozilla Application Suite that supports IMAP, POP mail protocols, and the HTML mail format.Thunderbird ESR is an extended support version of it. A security vulnerability exists in Mozilla Thunderbird ES...
WordPress Redirection 2.7.3 Remote File Inclusion
Details ================ Software: Redirection Version: 2.7.3 Homepage: https://wordpress.org/plugins/redirection/ Advisory report: https://advisories.dxw.com/advisories/ace-file-inclusion-redirection/ CVE: Awaiting assignment CVSS: 9 High; AV:N/AC:L/Au:S/C:C/I:C/A:C Description ================...
CVE-2017-5384
Proxy Auto-Config PAC files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed t...
Remote file inclusion
A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files execute PHP code or read non-PHP files by replacing a helper.json file...
EUVD-2018-4007
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name...
PT-2018-16138 · Node.Js · Node-Srv
Name of the Vulnerable Software and Affected Versions: node-srv versions prior to 2.1.1 Description: The node-srv node module has a Path Traversal issue due to a lack of validation of the url, allowing a malicious user to read the content of any file with a known path. This enables a remote...
SearchBlox XML External Entity Injection Vulnerability
SearchBlox is the U.S. SearchBlox company a set of open source and free of charge based on Lucene full-text search engine toolkit to build enterprise search and analytics solutions. The program provides a Web-based management interface , you can manage the entire search system . An XML external...
BurpBounty - A Extension Of Burp Suite That Improve An Active And Passive Scanner
This extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an improvement of the payload to send, we can create our own issue...
Remote file inclusion
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive...
DEBIAN-CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
JavaStart.jar Component File Manipulation
The vulnerability of the JavaStart.jar component in the Bomgar Remote Support Portal exists due to insufficient restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to create, modify, or delete arbitrary files remotely...
UBUNTU-CVE-2018-5170
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Luracast Restler Directory Traversal Vulnerability
Restler is a support for multiple protocols used to publish PHP classes and methods into a REST API open source framework . A directory traversal vulnerability exists in the public/examples/resources/getsource.php page of Luracast Restler used in the restler extension of TYPO3. A remote tele...
Security update for librsvg (moderate)
This update for librsvg fixes the following issues: - CVE-2018-1000041: Input validation issue could lead to credentials leak. bsc1083232 Update to version 2.40.20: + Except for emergencies, this will be the LAST RELEASE of the librsvg-2.40.x series. We are moving to 2.41, which is vastly improve...
ProjectPier PHP Remote File Inclusion Vulnerability
Project Pier is a free open source project management system . A PHP remote file inclusion vulnerability exists in the public/patch/patch.php file in Project Pier 0.8.8 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands or SQL statements with the...
Remote file inclusion
PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter...
CVE-2018-10759
PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter...
CVE-2018-10759
PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter...
CVE-2018-10759
The CVE-2018-10759 issue affects Project Pier 0.8.8 and earlier, where a PHP remote file inclusion vulnerability exists in public/patch/patch.php. The id parameter is not sanitized, enabling an attacker to remotely execute arbitrary commands or SQL statements. Some sources note potential command ...
