DEBIAN-CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

PYSEC-2019-154

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

Code Execution Vulnerability in MyuCMS v2.1.1022

MyuCMS is a content management system developed using ThinkPHP. A code execution vulnerability exists in MyuCMS v2.1.1022, which can be exploited by an attacker to gain control of a web server...

WordPress gd-rating-system plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gd-rating-system is a rating system plugin used in it. A cross-site scripting vulnerability exists in the log.php file in versions of...

CVE-2019-7870

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

CloudBees Jenkins File System SCM Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An information disclosure...

Magento Station Request Forgery Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento cross-site scripting vulnerability (CNVD-2019-26231)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

SQL Injection Vulnerability in cicms General Enterprise Website Builder System v2.1.1

Guangzhou Souk Network Technology Co., Ltd, is a professional organization focusing on Internet marketing in China. SQL injection vulnerability exists in cicms generic enterprise website builder system v2.1.1, which can be exploited by attackers to obtain database information...

MetadataExtractor Stack Overflow Vulnerability

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. A security vulnerability exists in MetadataExtractor version 2.1.0. An attacker can exploit this vulnerability to cause a denial of service stack consumption...

antSword Cross-Site Scripting Vulnerability

antSword is an open source cross-platform website management tool. A cross-site scripting vulnerability exists in the database configuration in versions of antSword prior to 2.1.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Magento cross-site scripting vulnerability (CNVD-2019-26240)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento versions 2.1.18 before 2.1, 2.2.9 befor...

Magento cross-site scripting vulnerability (CNVD-2019-26220)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

Magento Code Execution Vulnerability (CNVD-2019-39393)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9 and version 2.3...

DEBIAN-CVE-2019-12110

An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c...

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...

PT-2019-10045 · Rancher · Rancher

Name of the Vulnerable Software and Affected Versions: Rancher versions 2.0.0 through 2.1.5 Description: An issue allows project members with access to the default namespace to execute administrative privileged commands against the k8s cluster by mounting the netes-default service account in a po...

IBM Security Privileged Identity Manager Authorization Issues Vulnerability

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...

dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or...

PT-2019-19002 · Advancecomp +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: AdvanceCOMP versions prior to 2.1 Description: An issue was discovered that can cause an invalid memory address to occur in the adv png unfilter 8 function in lib/png.c. This can be triggered by sending a crafted file to a binary, allowing an...