6527 matches found
oc Arbitrary Command Execution Vulnerability (CNVD-2015-01830)
osc is a command-line interface written in Python, and also provides Python modules for use by Python programs. A security vulnerability exists in versions of osc prior to 0.151.0, which can be exploited by a remote attacker to execute arbitrary commands via shell metacharacters within a...
Ultimate PHP Board (UPB) Cross-Site Scripting Vulnerability
Ultimate PHP Board is a forum program. A cross-site scripting vulnerability exists in Ultimate PHP Board, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...
Request Tracker Remote Denial of Service Vulnerability
Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A denial of service vulnerability exists in Best...
Ruby on Rails 'to_json' Call Remote Denial of Service Vulnerability
Ruby on Rails Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language . A denial of service vulnerability exists in Ruby on Rails. A remote attacker can exploit this vulnerability to cause a denial of service...
Microsoft Internet Explorer CVE-2015-1623 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
DEBIAN-CVE-2014-9472
The email gateway in RT aka Request Tracker 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted email...
WordPress Calculated Fields Form 1.0.10 SQL Injection
Calculated Fields Form Wordpress Plugin = 1.0.10 - Remote SQL Injection Vulnerability + Author: Ibrahim Raafat + Twitter: https://twitter.com/RaafatSEC + Plugin: https://wordpress.org/plugins/calculated-fields-form/ + TimeLine - Feb 6 2015, The vulnerabilities reported - Feb 7 2015, Response and...
IBM Rational Insight Information Disclosure Vulnerability
IBM Rational Insight is an enterprise-class reporting application product from IBM in the U.S. It can extract data from third-party products into a data warehouse, and present the reports graphically using CognosBI services running on WebSphere. A security vulnerability exists in IBM Rational...
GNU glibc 'fnmatch_loop.c' remote buffer overflow vulnerability
GNU glibc is an implementation of the C library for the Linux operating system. A remote buffer overflow vulnerability exists in GNU glibc 'fnmatchloop.c', which can be exploited by an attacker to execute arbitrary code or launch a denial of service attack in the context of an affected applicatio...
JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment...
Speed Software Root Explorer and Explorer vulnerable to directory traversal
Overview Root Explorer and Explorer provided by Speed Software contain an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
ISC BIND Remote Denial of Service Vulnerability (CNVD-2015-01326)
ISC BIND is an implementation of the DNS protocol. A remote denial of service vulnerability exists in the ISC BIND Trust Anchor management, which allows an attacker to submit a malicious request to crash the name service program...
UBUNTU-CVE-2014-9512
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01069)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01053)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01080)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01072)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01078)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01084)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01075)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...