phpFK lite cross-site scripting vulnerability

phpFK lite is a forum system written in PHP. A cross-site scripting vulnerability exists in phpFK lite. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Total.js CMS Cross-Site Scripting Vulnerability

Total.js CMS is a content management system CMS based on a NoSQL database. A cross-site scripting vulnerability exists in Total.js CMS version 12.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Apache Karaf Arbitrary File Overwrite Vulnerability

Apache Karaf is the United States Apache Apache Foundation for the deployment of applications and components of a lightweight OSGi Java Dynamic Modular System container. An arbitrary file overwrite vulnerability exists in Apache Karaf versions prior to 4.2.3, which can be exploited by a remote...

[ASA-201903-12] libssh2: multiple issues

Arch Linux Security Advisory ASA-201903-12 ========================================== Severity: Critical Date : 2019-03-22 CVE-ID : CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 Package : libssh2 Type : multiple issue...

Vulnerability of the microprogramming software of Moxa EDS and IKS switches, allowing attackers to bypass authentication procedures

The vulnerability of Moxa EDS and IKS microcontroller software lies in the absence of restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

PHP Scripts Mall Advance B2B Script Denial of Service Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. A denial of service vulnerability exists in PHP Scripts Mall Advance B2B Script 2.1.4, which can be exploited by remote attackers to cause a denial of service via JavaScript code in th...

Gila CMS Cross-Site Scripting Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Gila CMS version 1.9.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'search' parameter...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2019-07239)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote memory corruption vulnerability exists in Microsoft IE 10 and 11 that originates when the program incorrectly handles objects in memory. A remote attacker cou...

SQLiteManager SQL Injection Vulnerability

SQLiteManager is a set of web-based SQLite database management tools that support multiple languages. A SQL injection vulnerability exists in SQLiteManager versions 1.2.0 and 1.2.4. A remote attacker can exploit this vulnerability to execute SQL commands...

GPON Router Remote Unauthenticated Enable/Disable Telnet Service Vulnerability

GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard. Gigabit-Capable PON GPON technology is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x...

Digium Asterisk Open Source Remote Crash Vulnerability

Digium Asterisk Open Source is an open source telephone exchange PBX system software from Digium. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A security vulnerability exists in Digium Asterisk Open Source version 15.x and version 16.x...

Flexera Software FlexNet Publisher lmgrd and vendor daemon component remote code execution vulnerability

Flexera Software FlexNet Publisher FLEXlm is the core software license management component of Flexera Software's Entitlement Relationship Management Solution, which provides pricing and customization of software license terms for software and hardware manufacturers. lmgrd and vendor daemon are...

D-Link DIR-825 Information Disclosure Vulnerability

D-Link DIR-825 devices are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-05294)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS version 4.1.0 cross-site scripting vulnerability, remote attackers can use the /index.php?m=message&f=message&v=add URL of the 'username' parameter to use the vulnerability to injec...

PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2019-35826)

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A cross-site scripting vulnerability exists in the admin/default.php file in PHPMyWind v5.5, which can be exploited by a remote attacker to inject arbitrary Web script or HTML with the help of HTTP...

ZoneMinder SQL Injection Vulnerability (CNVD-2019-04688)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. ZoneMinder 1.32.3 and earlier versions of skins/classic/views/events.php file has a SQL injection vulnerability , a remote attacker can with the help of 'filterQueryterms0cnj'...

Google Chrome Security Updates (stable-channel-update-for-desktop-2019-02) - Mac OS X

Google Chrome is prone to an unspecified remote security vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the mp4ff_read_stts function in the software for working with audio files, known as Freeware Advanced Audio Decoder 2 (FAAD2), allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstts function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 FAAD2, is related to improper processing of mp4 files. This can lead to excessive resource consumption by the processor. Exploiting this vulnerability could allow ...

HPESBHF03907 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers, Remote Cross-Site Scripting in HPE iLO 5 Web User Interface

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers Prior to v1.40 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7117 |...

FreshRSS Cross-Site Scripting Vulnerability

FreshRSS is an open source, self-hosted RSS aggregator with support. A cross-site scripting vulnerability exists in FreshRSS version 1.11.1. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with the help of 'c' or 'a' parameter...