4515 matches found
Cisco IOS Smart Install Packet Image List Parameter Handling DoS (cisco-sa-20160323-smi)
According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Smart Install client feature due to improper handling of image list parameters. An unauthenticated, remote attacker can exploit this issue, via craft...
HybridAuth - Less critical - Multiple vulnerabilities - SA-CONTRIB-2016-018
The HybridAuth Social Login module enables you to allow visitors to authenticate or login to a Drupal site using their identities from social networks like Facebook or Twitter. Open redirect The module doesn't verify the "destination" redirect after a login to be a non-external URL causing an ope...
Drupal Commerce - Less Critical - Information disclosure - SA-CONTRIB-2016-019
This module enables you to build an online store that uses nodes to display products through the use of product reference fields. The default widget for those fields is an autocomplete textfield similar to the taxonomy term reference field's autocomplete widget. As you type in the textfield, the...
SA Contacts Lite - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application SA Contacts Lite published at the 'play' market has multiple vulnerabilities...
Cisco IOS SIP Memory Leak DoS (CSCuj23293)
According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Session Initiation Protocol SIP gateway implementation due to improper handling of malformed SIP messages. An unauthenticated, remote attacker can...
FreeBSD : bind -- denial of service vulnerability (c9075321-f483-11e5-92ce-002590263bf5)
ISC reports : An error parsing input received by the rndc control channel can cause an assertion failure in sexpr.c or alist.c. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
FreeBSD-SA-16:15.sysarch
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:15.sysarch REVISED Security Advisory The FreeBSD Project Topic: Incorrect argument validation in sysarch2 Category: core Module: kernel Announced: 2016-10-25...
Fedora 22 : drupal7-7.43-1.fc22 (2016-45d4920315)
https://www.drupal.org/SA-CORE-2016-001 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Scald File - Critical - Remote Code Execution - SA-CONTRIB-2016-015
When a PDF is uploaded in Scald File, various tools can be executed if they're installed on the server, to try to generate a thumbnail out of that PDF. This is mitigated by the need to have the sufficient permissions to upload a file in Scald, and also to have at least one of the thumbnail creati...
Fedora 23 : drupal7-jquery_update-2.7-1.fc23 (2015-c2f6872886)
See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 21 : drupal7-jquery_update-2.7-1.fc21 (2015-bf4adb12aa)
See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Google Analytics Counter - Moderately Critical - CSRF - SA-CONTRIB-2016-011
The Google Analytics Counter module provides total pageview counts for each page on a website. In that it is similar to the core Statistics module counter, but it is much lighter and ultimately faster because it draws on data from Google Analytics. This is why it is also able to effortlessly coun...
Cross-Site Scripting in TYPO3 component Backend
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-006/...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
Open redirect via double-encoded 'destination' parameter
More info at https://www.drupal.org/SA-CORE-2016-001...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
Reflected file download vulnerability
More info at https://www.drupal.org/SA-CORE-2016-001...
Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability (cisco-sa-20160210-asa-ike)
Cisco ASA Software is prone to a buffer overflow vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
sa-debating.org.au XSS vulnerability
Vulnerable URL: http://www.sa-debating.org.au/Schools-Competition/Draws/My-Team-Draw.php?teamName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:39 GMT Vulnerability type:| XSS Vulnerability...
FreeBSD : openssh -- information disclosure (dfe0cdc1-baf2-11e5-863a-b499baebfeaf)
OpenSSH reports : OpenSSH clients between versions 5.4 and 7.1 are vulnerable to information disclosure that may allow a malicious server to retrieve information including under some circumstances, user's private keys. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...