499 matches found
CVE-2018-17928
The product CMS-770 Software Versions 1.7.1 and prioris vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism...
openSUSE Security Update : znc (openSUSE-2018-819)
This update for znc fixes the following issues : - Update to version 1.7.1 - CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf bnc1101281 - CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name. bnc1101280 - Update to...
openSUSE: Security Advisory for znc (openSUSE-SU-2018:2231-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for znc (moderate)
This update for znc fixes the following issues: - Update to version 1.7.1 CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf bnc1101281 CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name. bnc1101280 - Update to...
Security update for znc (moderate)
This update for znc fixes the following issues: - Update to version 1.7.1 CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf bnc1101281 CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name. bnc1101280 - Update to...
DEBIAN-CVE-2018-14056
ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories...
Signal Desktop HTML Tag Injection Variant 2
Title: Signal-desktop HTML tag injection variant 2 Date Published: 2018-05-16 Last Update: 2018-05-16 CVE Name: CVE-2018-11101 Class: Code injection Remotely Exploitable: Yes Locally Exploitable: No Vendors contacted: Signal.org Vulnerability Description: Signal-desktop is the standalone desktop...
CVE-2017-10001
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 1.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
WeeChat 'irc_ctcp_dcc_filename_without_quotes' function buffer overflow vulnerability
WeeChat Wee Enhanced Environment for Chat is an efficient lightweight IRC chat client. A security vulnerability exists in the 'ircctcpdccfilenamewithoutquotes' function in WeeChat versions prior to 1.7.1. A remote attacker can exploit this vulnerability to cause a denial of service crash by sendi...
TigerVNC Denial of Service Vulnerability (CNVD-2017-05162)
TigerVNC is a high-performance, platform-neutral implementation of VNC Virtual Network Computing, a client/server application that allows users to launch and interact with graphical applications on remote machines. A security vulnerability exists in the SSecurityPlain.cxx file in TigerVNC version...
TigerVNC Denial of Service Vulnerability (CNVD-2017-05161)
TigerVNC is a high-performance, platform-neutral implementation of VNC Virtual Network Computing, a client/server application that allows users to launch and interact with graphical applications on remote machines. A security vulnerability exists in the CConnection::CConnection function of the...
TigerVNC Denial of Service Vulnerability
TigerVNC is a high-performance, platform-neutral implementation of VNC Virtual Network Computing, a client/server application that allows users to launch and interact with graphical applications on remote machines. A security vulnerability exists in TigerVNC version 1.7.1. An attacker could explo...
UBUNTU-CVE-2017-7394
In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...
DEBIAN-CVE-2017-7392
In TigerVNC 1.7.1 SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt, an unauthenticated client can cause a small memory leak in the server...
CVE-2017-6427
A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request...
WordPress Magic Fields 1 1.7.1 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in Magic Fields 1 WordPress Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016 ----------------------------------------------------------------------...
Ubiquiti Inc.: [EdgeSwitch] Web GUI command injection as root with Privilege-1 and Privilege-15 users
The researcher found a privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15. OS command injection i...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.
The vulnerability of the gitweb-1.7.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the taglib package up to version 1.7.1 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.
The vulnerability of the git-1.7.1 package on the CentOS operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...