1719 matches found
CVE-2017-2193
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2193
CVE-2017-2193 affects the Tera Term installer (versions 4.94 and earlier). The root cause is an untrusted DLL search path in the installer, enabling a Trojan horse DLL in an unspecified directory to be loaded, which could allow arbitrary code execution with the privileges of the user invoking the...
CVE-2017-2193: Untrusted Search Path
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
PT-2017-15252
Name of the Vulnerable Software and Affected Versions Tera Term versions 4.94 and earlier Description The issue is related to an untrusted search path vulnerability in the installer. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Tera Term Installer Untrustworthy Search Path Vulnerability
Tera Term is a terminal emulator that supports serial ports, telnet and SSH connections.Installer is the installer of it. An untrustworthy search path vulnerability exists in the installer in Tera Term 4.94 and earlier versions. An attacker can exploit this vulnerability to gain privileges with t...
Installer of Tera Term may insecurely load Dynamic Link Libraries
Overview The installer of Tera Term provided by TeraTerm Project contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informati...
JVN#06770361: Installer of Tera Term may insecurely load Dynamic Link Libraries
The installer of Tera Term provided by TeraTerm Project contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use...
The Successful CISO: Tips for Paving the Way to Job Security
Seasoned CISOs know that failure to plan past a two-year window is dangerous—to both their company and their job security. But it’s all too common for many security strategies to look only two years out. Imperva CISO Shahar Ben-Hador has been with Imperva for eight-and-a-half years—the last...
DEBIAN-CVE-2017-6818
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
CVE-2017-6818
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
CVE-2017-6818
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
CVE-2017-6818
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
CVE-2017-6818
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
CVE-2017-6818: Improper Neutralization of Input During Web Page Generation
In WordPress before 4.7.3 wp-admin/js/tags-box.js, there is cross-site scripting XSS via taxonomy term names...
PT-2017-17349
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.3 Description The issue allows for cross-site scripting XSS via taxonomy term names. Recommendations For versions prior to 4.7.3, update to version 4.7.3 or later to resolve the issue...
wordpress -- multiple vulnerabilities
WordPress versions 4.7.2 and earlier are affected by six security issues. Cross-site scripting XSS via media file metadata. Control characters can trick redirect URL validation. Unintended files can be deleted by administrators using the plugin deletion functionality. Cross-site scripting XSS via...
WordPress < 4.7.3 Multiple Vulnerabilities
Binary data 9980.prm...
Nextcloud: Version 4.7.2 of wordpress is vulnerable
Hello team, I observed that your website https://nextcloud.com still use wordpress 4.7.2 Version 4.7.2 of wordpress is vulnerable to : Cross-site scripting XSS Control characters can trick redirect URL validation Cross-site scripting XSS via video URL in YouTube embeds Cross-site scripting XSS vi...
CVE-2017-5345
SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...
CVE-2017-5345
SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...