6238 matches found
Welcart vulnerable to SQL injection
Overview Welcart provided by Collne Inc. is a WordPress plugin. Welcart contains an SQL injection vulnerability CWE-89 due to a flaw in the processing of searchcolumn and switch parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
UBUNTU-CVE-2015-5277
The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...
Fast Packet Networking Toolkit: Snabb Switch
Snabb Switch is open source software for solving novel problems in networking. Blending the latest techniques for high-performance x86 packet processing together with a high-level LuaJIT programming interface. The goal is to offer the easiest way to create and deploy new network functions in larg...
Important: Red Hat Security Advisory: glibc security update
Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7.1 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...
glibc: data corruption while reading the NSS files database
It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or corrupt the heap depending on adjacent heap contents. A local attacker could potentially use this flaw to execute arbitrary code on the system...
Advantech Switch Bash Environment Variable Code Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Advantech Switch Bash Environment Variable Code Injection Shellshock', 'Description' = %q This module exploits the Shellshock...
Switch 4.68 - Code Execution Vulnerability
Exploit for windows platform in category remote exploits Convert the audio data stream 3. Paste malicious url in input "Enter url of the audio stream" 4. Click start the audio stream 5. PHP code executed successfully Code Execution Calculator By ZwX - Vulnerability Lab.com...
多款Huawei eSpace交换机拒绝服务漏洞
No description provided by source...
Huawei eSpace U2980 and U2990 Denial of Service Vulnerabilities
Huawei eSpace U2980 and U2990 are both telephone switch products from Huawei, a Chinese company. A denial of service vulnerability exists in the Huawei eSpace U2980 and U2990 switches. An attacker could use this vulnerability to cause the program to deny service to legitimate users...
Switch v4.68 - Code Execution Vulnerability
Document Title: =============== Switch v4.68 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1649 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1649 Common...
RedHat Update for glibc RHSA-2015:2172-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
kernel: partial ASLR bypass through TLS base addresses leak
An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...
glibc: data corruption while reading the NSS files database
It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or corrupt the heap depending on adjacent heap contents. A local attacker could potentially use this flaw to execute arbitrary code on the system...
kernel: partial ASLR bypass through TLS base addresses leak
An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...
Lenovo Switch Center竞争条件漏洞
No description provided by source...
Lenovo Switch Center本地提权漏洞
No description provided by source...
Lenovo Switch Center远程提权漏洞
No description provided by source...
IBM System Networking Switch Center Contention Condition Vulnerability
IBM System Networking Switch Center is a suite of applications used to remotely monitor and manage Ethernet converged switches from IBM USA, which was acquired by Lenovo of China. A contention condition vulnerability exists in IBM System Networking Switch Center versions prior to 7.3.1.5 and Leno...
Lenovo Switch Center Competitive Conditions Vulnerability
Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A competitive condition vulnerability exists in the administration-panel web service in IBM System Networking...
CVE-2015-7820
Race condition in the administration-panel web service in IBM System Networking Switch Center SNSC before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal...