PT-2025-9720 · Unknown · Projectworlds Online Hotel Booking

Name of the Vulnerable Software and Affected Versions: projectworlds Online Hotel Booking version 1.0 Description: A critical issue has been found in projectworlds Online Hotel Booking, affecting an unknown part of the file /admin/addroom.php. The manipulation of the roomname argument leads to SQ...

Linux Distros Unpatched Vulnerability : CVE-2019-3814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid...

Linux Distros Unpatched Vulnerability : CVE-2014-1346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a...

Linux Distros Unpatched Vulnerability : CVE-2014-1568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Network Security Services NSS before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox...

Linux Distros Unpatched Vulnerability : CVE-2016-2111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote...

Linux Distros Unpatched Vulnerability : CVE-2015-5589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer...

Linux Distros Unpatched Vulnerability : CVE-2012-5076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect...

Linux Distros Unpatched Vulnerability : CVE-2017-12454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows...

Linux Distros Unpatched Vulnerability : CVE-2014-9827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. CVE-2014-9827 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2016-10094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2015-8139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors. CVE-2015-8139 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2016-6348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack. CVE-2016-6348 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2015-2806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in asn1derdecoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors. CVE-2015-2806 Note...

Linux Distros Unpatched Vulnerability : CVE-2013-7062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7,...

Linux Distros Unpatched Vulnerability : CVE-2017-12456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readsymbolstabsdebugginginfo function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2012-5081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and...

Linux Distros Unpatched Vulnerability : CVE-2016-7101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service out-of- bounds read via a large row value in an sgi file...

Linux Distros Unpatched Vulnerability : CVE-2017-12449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdvmssavesizedstring function in vms-misc.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows...

Linux Distros Unpatched Vulnerability : CVE-2010-2322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Absolute path traversal vulnerability in the extractjar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via...

Linux Distros Unpatched Vulnerability : CVE-2010-4180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSLOPNETSCAPEREUSECIPHERCHANGEBUG is enabled, does not properly prevent modification of the ciphersuite in...