4733 matches found
VMware ESX Multiple Vulnerabilities (VMSA-2010-0007) (remote check)
The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A format string flaw exists in the VMware Remote Console that allows a remote attacker to execute arbitrary code. CVE-2009-3732 - A flaw exists in VMware Tools due to imprope...
Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability
Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ====================================...
Microsoft Windows DLL Load Denial of Service Vulnerability
Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Sync Framework is one of the synchronization platform components used to enable collaboration and offline access to applications, services, and devices. A denial of service vulnerability exists in Syn...
BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution
Summary Engineering Tool for West Pro Series of controllers KS20-1, KS92-1, TB40-1, KS800, KS816, Dig280-1, KS vario, CI45, KS45, SG45, TB45, RL400, Pro96, CAL4600. Description BlueControl suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries...
mapbox-rails Content Injection via TileJSON Name
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios. If you use L.mapbox.map and L.mapbox.shareControl it is possible for a malicious user with control over the TileJSON content to inject script content...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
Moderate: Red Hat Security Advisory: samba security update
Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
samba: Insufficient symlink verification in smbd
An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...
DEBIAN-CVE-2015-5252
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share...
WordPress Simple Share Buttons Adder Plugin <= 6.0.0 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...
UBUNTU-CVE-2015-5252
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share...
MS15-134 Microsoft Office COM Object DLL Planting with els.dll
While loading an embedded object in Microsoft Word or other Microsoft Office products, it is possible to load a Classic Event Viewer Extension, which causes a LoadLibraryW call that attempts to load elsext.dll from the same directory as the Office document. From an untrusted remote share such as...
One after another: the VTech user data leaked, and was broke two major vulnerability-vulnerability warning-the black bar safety net
Recently, the world's largest infant electronic learning product Maker Vtech（Vtech）is aeration 4 8 0 million parents and 6 4 0 million for children information disclosure. ! Due to this event, Vtech its share price fell to a year low. Followed, with security researchers in their innotab Max produ...
share-online.biz XSS vulnerability
Vulnerable URL: https://www.share-online.biz/helpdesk/index.php?x';alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| Yes, at 22.06.2016 Latest check for patch:| 22.06.2016 18:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5888 Google Pagerank| ...
WordPress Social Share Button Plugin <= 2.1 - Stored Cross Site Scripting (XSS)
Because of this vulnerability, authenticated administrators can store HTML or JS code. Solution Update the plugin...
