1066 matches found
WordPress Smart Google Code Inserter plugin <=3.4 - SQL injection (SQLi) vulnerability
SQL injection SQLi vulnerability found by Benjamin Lim in WordPress Smart Google Code Inserter plugin versions =3.4. Plugin function saveGoogleAdWords function in smartgooglecode.php file passes unsanitized $POST"oId" input into the SQL query. Solution Update the WordPress Smart Google Code...
DLA-1225-1 asterisk - security update
Bulletin has no description...
Arbitrary Code Execution in mathjs
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Recommendation Update to version 3.17.0 or later...
DSA-4068-1 rsync - security update
Bulletin has no description...
DLA-1201-1 libxcursor - security update
Bulletin has no description...
SUSE-SU-2017:3080-1 Security update for openstack-nova
This update for openstack-nova brings the latest version provided by the OpenStack upstream project including the following security fix: - CVE-2017-16239: Filter Scheduler bypass through rebuild action bsc1066198...
DLA-1183-1 samba - security update
Bulletin has no description...
JVN#18420340: Multiple vulnerabilities in BOOK WALKER for Windows/Mac
BOOK WALKER for Windows/Mac provided by BOOK WALKER Co.,Ltd. are applications to view e-books. Installer of BOOK WALKER for Windows contains a vulnerabirity, which may lead to insecurely loading Dynamic Link Libraries. Also BOOK WALKER for Windows/Mac contain a vulnerability which may lead to...
DSA-4030-1 roundcube - security update
Bulletin has no description...
DLA-1166-2 tomcat7 - regression update
Bulletin has no description...
DSA-4015-1 openjdk-8 - security update
Bulletin has no description...
GHSA-333X-9VGQ-V2J4 Directory Traversal in geddy
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...
Directory Traversal in geddy
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...
Symlink Arbitrary File Overwrite in tar
Versions of tar prior to 2.0.0 are affected by an arbitrary file write vulnerability. The vulnerability occurs because tar does not verify that extracted symbolic links to not resolve to targets outside of the extraction root directory. Recommendation Update to version 2.0.0 or later...
DSA-4002-1 mysql-5.5 - security update
Bulletin has no description...
DSA-3999-1 wpa - security update
Bulletin has no description...
DLA-1124-1 dnsmasq - security update
Bulletin has no description...
DSA-3987-1 firefox-esr - security update
Bulletin has no description...