ImageWorsener Denial of Service Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'getrawsampleint' function in the imagew-main.c file of the libimageworsener.a file in ImageWorsener version 1.3.2. When libjpeg 8d is used, an attacker can exploit this vulnerability to cause...

CVE-2017-3770

Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system...

DaisyThemes WordPress Easy Team Manager SQL Injection Vulnerability

DaisyThemes WordPress Easy Team Manager is a team management plugin for WordPress developed by DaisyThemes UK. A SQL injection vulnerability exists in DaisyThemes WordPress Easy Team Manager version 1.3.2, which stems from a vulnerability in . /easy-team-manager/inc/easyteammanagerdescedit.php fi...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

Ninka Security Bypass Vulnerability

Ninka is a set of source code license identification tools. A security vulnerability exists in Ninka versions prior to 1.3.2. It can be exploited by remote attackers to obtain sensitive information or cause a denial of service process hang by means of a specially crafted filename...

Atlassian Confluence AppFusions Doxygen 1.3.x Information Disclosure

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Information Exposure Through an Error Message CWE-209 Date found: 2016-06-29 Date published: - CVSSv3 Score:...

WordPress Plugin Sirv 1.3.1 - SQL Injection

WordPress Plugin Sirv 1.3.1 - SQL Injection Exploit Title: Sirv 1.3.1 Plugin For WordPress Sql Injection Date: 10/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/sirv/ Software Link: https://wordpress.org/plugins/sirv/ Contact: http://twitter.com/lenonleite...

CVE-2015-5603: JIRA and the HipChat For JIRA plugin - Velocity Template Injection

Note: the current version of this advisory can be found at https://confluence.atlassian.com/x/IcBKLg . CVE ID: CVE-2015-5603 Product: JIRA and the HipChat for JIRA plugin. Affected HipChat For JIRA plugin versions: 1.3.2 = version 6.30.0 Affected JIRA product versions: 6.3.5 = version 6.4.11...

[SECURITY] [DLA 333-1] cakephp security update

Package : cakephp Version : 1.3.2-1.1+deb6u11 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML as an input. It is...

django-markupfield Arbitrary File Read Vulnerability

Django is the Python programming language driven by an open source model-view-controller style Web application framework. Versions prior to django-markupfield 1.3.2 use the default docutils RESTRUCTUREDTEXTFILTERSETTINGS setting, which allows remote attackers to exploit vulnerabilities to include...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libXext-debuginfo-1.3.2 package of the Red Hat Enterprise Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Hillstone HS TFTP Server Denial of Service Vulnerability

Hillstone HS TFTP Server is the TFTP service program built into the hillstone series. A denial of service vulnerability exists in Hillstone HS TFTP Server version 1.3.2 that allows remote attackers to cause a denial of service via a long filename in an RRQ or WRQ operation...

DEBIAN-CVE-2014-9357

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted 1 image or 2 build in a Dockerfile in an LZMA .xz archive, related to the chroot for archive extraction...

openSUSE Security Update : docker (openSUSE-SU-2014:1596-1)

docker was updated to version 1.3.2 to fix two security issues. These security issues were fixed : - Symbolic and hardlink issues leading to privilege escalation CVE-2014-6407. - Potential container escalation CVE-2014-6408. There non-security issues were fixed : - Fix deadlock in docker ps -f...

BibORB 1.3.2 index.php Traversal Arbitrary File Manipulation

No description provided by source. source: http://www.securityfocus.com/bid/12583/info BibORB is reported prone to multiple vulnerabilities arising from insufficient sanitization of user-supplied input. These issues can be exploited by a remote attacker to carry out cross-site scripting, HTML...

BibORB 1.3.2 Login Module Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/12583/info BibORB is reported prone to multiple vulnerabilities arising from insufficient sanitization of user-supplied input. These issues can be exploited by a remote attacker to carry out cross-site scripting, HTML...

LinPHA 1.3.2/1.3.3 login.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these issues to execute arbitrary script code in the...

tinyproxy tinyproxy 1.3.2/1.3.3 Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2217/info Versions 1.3.2 and 1.3.3 of tinyproxy, a small HTTP proxy, exhibit a vulnerability to heap overflow attacks. A failure to properly validate user-supplied input which arguments a call to sprintf can allow...

LinPHA <= 1.3.2 - (rotate.php) Remote Command Execution Vulnerability

No description provided by source. /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ // // // // //...

TORCS <= 1.3.2 xml buffer overflow /SAFESEH evasion

No description provided by source. / Exploit Title: TORCS = 1.3.2 buffer overflow /SAFESEH evasion Date: 07/02/2012 Discovered and exploited by: Fluidsignal Group - Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link:...