33191 matches found
UBUNTU-CVE-2015-1833
XML external entity XXE vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request...
CVE-2015-2121
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...
CVE-2015-1834 - Path Traversal Vulnerability | Cloud Foundry
CVE-2015-1834 – Path Traversal Vulnerability Moderate Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v208 Description A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller. Path traversal is the ‘outbreak’ of a given director...
WordPress Video Conference Integration Plugin <= 4.91.8 - Remote File Upload
./videowhisper-video-conference-integration/vc/vwupload.php allows various remote unauthenticated file uploads. Anyone can upload the following files to an unsuspecting wordpress site. Solution Upgrade plugin...
WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion
This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...
WordPress JS Multi Hotel Plugin <= 2.2.1 - Remote File Inclusion
This plugins is prone to a remote file inclusion vulnerability via includes/showimage.php file parameter. Solution Update the plugin...
WordPress Export To Text Plugin <= 2.2 - Remote File Inclusion
This plugin is prone to a remote file inclusion vulnerability. Solution Upgrade the plugin...
WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion
This plugin is prone to fsml-admin.js.php wpp parameter remote file inclusion vulnerability. It allows attackers to obtain sensitive information. Solution Update plugin...
WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion
This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...
WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion
This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...
WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion
This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...
WordPress Video Conference Integration Plugin <= 4.91.8 - Remote File Upload
./videowhisper-video-conference-integration/vc/vwupload.php allows various remote unauthenticated file uploads. Anyone can upload the following files to an unsuspecting wordpress site. Solution Upgrade plugin...
Avsarsoft Matbaa Script - Multiple Vulnerabilities
Title : Avsarsoft Matbaa Script - Multiple Vulnerabilities Author : ZoRLu / [email protected] Website : milw00rm.com / milw00rm.net / milw00rm.org Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultimate Discovery : 15/04/15 Publish : 23/04/15 Thks : exploit-db.com,...
[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities
Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...
[SECURITY] [DSA 3250-1] wordpress security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3250-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 04, 2015 http://www.debian.org/security/faq -...
Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8
Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site: https://wordpress.org/support/plugin/videowhisper-video-conference-integration Vendor: http://www.videowhisper.com/...
Unspecified vulnerability in Pydio (CNVD-2015-03022)
AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...
Magento Mage_Adminhtml_Block_Report_Search_Grid Class 'popularity' Parameter SQLi
The Magento application running on the remote web server is affected by a SQL injection vulnerability due to failing to properly sanitized the user-supplied range inputs to the 'popularity' parameter of the MageAdminhtmlBlockReportSearchGrid class. An unauthenticated, remote attacker can exploit...
Unspecified vulnerability in Pydio (CNVD-2015-03021)
AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...
CVE-2015-1155
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site...