299 matches found
steuerberatungskanzleien.de XSS vulnerability
Open Bug Bounty ID: OBB-74086 Description| Value ---|--- Affected Website:| steuerberatungskanzleien.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...
LivelyCart SQL Injection Vulnerability
LivelyCart is a PHP online storage store based on JQuery. A SQL injection vulnerability exists in LivelyCart version 1.2.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'searchquery' parameter in the product/search URI...
PT-2015-6783
Name of the Vulnerable Software and Affected Versions LivelyCart version 1.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search query parameter to the "product/search" endpoint. Recommendations For LivelyCart version 1.2.0, consider...
SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2015:1077-1)
openldap2 was updated to fix two security issues and one non-security bug. The following vulnerabilities were fixed : - A remote attacker could cause a denial of service through a NULL pointer dereference and crash via an empty attribute list in a deref control in a search request. bnc916897...
Cross site scripting
Cross-site scripting XSS vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted search query...
PT-2015-6570
Name of the Vulnerable Software and Affected Versions Drupal Current Search Links module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the Current Search Links module for Drupal. This occurs when the "Append the keywords passed by the user to the list"...
CVE-2015-4388: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted search query...
CVE-2015-0146
IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended...
CVE-2015-0146
IBM Content Collector for Email (3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001) is affected by an information-disclosure vulnerability due to improper handling of an unspecified query operator when searching IBM FileNet P8 systems via IBM Content Search Servi...
PT-2015-4504
Name of the Vulnerable Software and Affected Versions IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001 IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001 Description The issue allows local users to bypass intended document-access...
CVE-2015-0146: Undefined Security Weakness
IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended...
OpenLDAP Double Release Vulnerability
OpenLDAP is an open source Lightweight Directory Access Protocol LDAP implementation. A double-release vulnerability in OpenLDAP 2.4.40 allows remote attackers to launch a denial of service attack via a matching value-controlled search query...
Double free
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
Wordpress CM Download Manager 2.0.0 /lib/controllers/CMdownloadController.php 代码执行漏洞
The code injection vulnerability has been found and confirmed within the software as an anonymous user. A successful attack could allow an anonymous attacker gains full control of the application and the ability to use any operating system functions that are available to the scripting environment...
Soulseek 157 NS x / 156.x - Remote Distributed Search Code Execution
No description provided by source. ============================================= - Release date: May 24th, 2009 - Discovered by: Laurent Gaffié - Severity: critical ============================================= I. VULNERABILITY ------------------------- Soulseek 157 NS & 156. Remote Distributed...
