qemu-kvm security update

1.5.3-141.el74.1 - kvm-qemu-nbd-Ignore-SIGPIPE.patch bz1468107 - Resolves: bz1468107 CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort rhel-7.4.z...

WordPress Brute Force Login Protection plugin <= 1.5.2 - Reflected Cross-Site Scripting (XSS) Vulnerability

WordPress Brute Force Login Protection plugin Reflected Cross-Site Scripting XSS vulnerability exists on the plugin’s setting page. This vulnerability occurs in the function showSettingsPage in the file /brute-force-login-protection.php. Solution Update the plugin to version 1.5.3...

Kunena Forum Extension 'CVE-2009-4550' SQL Injection Vulnerability

the Kunena Forum Extension for Joomla is prone to a SQL injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Spider random articles before 1.5.3

Spider random articles versions before 1.5.3 Resolution: update to 1.5.3 Update notice: https://web-dorado.com/products/joomla-random.html...

WordPress Ad Inserter Plugin 1.5.2 - CSRF

CSRF vulnerability allows an attacker to insert an arbitrary script into admin page. After that an attacker can do almost anything on the admin's browser. Solution Update to Latest version 1.5.3...

WordPress Infusionsoft Gravity Forms Add-on Arbitrary File Upload Vulnerability

WordPress Infusionsoft Gravity Forms Add-on is prone to remote file upload vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ATutor 1.5.x documentation/admin/index.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

Helma 1.5.3 Search Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24880/info Helma is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

ATutor 1.5.x create_course.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

haneWIN DNS Server Denial Of Service Vulnerability

This host is running haneWIN DNS server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbhanewindnsserverdosvuln.nasl 6769 2017-07-20 09:56:33Z teissa $ haneWIN DNS Server Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2014 Greenbone...

Question2Answer 1.5.3 CSRF / Brute Force Vulnerability

Exploit for php platform in category web applications These are Brute Force, Insufficient Anti-automation and Cross-Site Request Forgery vulnerabilities in Question2Answer. This is the first part of vulnerabilities in this web application. ------------------------- Affected products:...

TYPO3 Security Bulletin

It has been discovered that the extension powermail powermail is vulnerable to Cross-Site Scripting, SQL Injection and Validation Bypass Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.5.3 and below Vulnerability...

Adobe Flash Player/Air Multiple Vulnerabilities - dec09 (Windows)

This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultvulndec09win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - dec09 Windows Authors: Antu Sanadi Copyright:...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

Binary data 5256.prm...

ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability

Security updates available for Adobe Flash Player Release date: December 8, 2009 Vulnerability identifier: APSB09-19 CVE numbers: CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800, CVE-2009-3951 Platform: All Platforms Summary Critical vulnerabilities have...

Joomla Component ownbiblio 1.5.3 (catid) SQL Injection Vulnerability

No description provided by source. Joomla Component Ownbiblio SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Ownbiblio...

webdirscript-sql.txt

|| | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

krb5 kadmind buffer overflow

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...

ClipShare 1.5.3 - 'ADODB-Connection.Inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22928/info ClipShare is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

PT-2006-6188 · Softerra · Softerra Php Developer Library

Name of the Vulnerable Software and Affected Versions: Softerra PHP Developer Library versions 1.5.3 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via the lib dir parameter. Recommendations: For Softerra PHP Developer Library versions...