Ansible Bypass Security Restrictions Vulnerability

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security vulnerability...

Zenphoto has multiple unspecified vulnerabilities

ZenPhoto is a compact photo album software with RSS output, FTP upload method, Tag function, comment reply and other features. The following security vulnerabilities exist in versions of Zenphoto prior to 1.4.9, which can be exploited by attackers to take control of the application, access or...

jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04177)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack version 6.1.12 prior t...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. A cross-site scripting vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which allows remote, authenticated users to inject arbitrary web script or HTML via reference parameters...

Google Chrome memory misreference vulnerability (CNVD-2015-03356)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. This vulnerability allows remote attackers to execute arbitrary code in the current program context...

Google Chrome Denial of Service Vulnerability (CNVD-2015-03372)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 43.0.2357.65 that allows an attacker to cause a denial of service via unknown vectors...

Google Chrome memory corruption vulnerability (CNVD-2015-02654)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 42.0.2311.90, the function NaClSandbox::InitializeLayerTwoSandbox within components/nacl/loader/sandboxlinux/naclsandboxlinux.cc Failure to apply RLIMITAS and RLIMITDATA restrictions to...

FreeXL Arbitrary Code Execution Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A security vulnerability exists in versions of FreeXL prior to 1.0.0i. The vulnerability can be exploited by a remote attacker with a specially crafted...

Websense TRITON AP-WEB Information Disclosure Vulnerability

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 failed to properly restrict access to files in the explorerwse/ directory, allowing attackers to submit special requests to obtain sensitive information...

Google Chrome PDFium Denial of Service Vulnerability (CNVD-2015-01549)

Google Chrome is a web browsing tool developed by Google. A denial of service vulnerability exists in Google Chrome versions prior to 41.0.2272.76 using PDFium, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

WordPress plugin Pixabay Images arbitrary file write vulnerability (CNVD-2015-00815)

The Pixabay Images plugin is a plugin that supports the insertion of selected CC0 public domain photos from Pixabay an image material sharing network anywhere in the blog. An arbitrary file write vulnerability exists in versions of the WordPress plugin Pixabay Images prior to 2.4, which allows...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2015-00595)

Oracle VM VirtualBox is an open source virtual machine software. A security vulnerability in the VMSVGA device child of Oracle VM VirtualBox versions prior to 4.3.20 allows remote attackers to exploit the vulnerability to affect the availability, integrity of the system...

UBUNTU-CVE-2015-1164

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // slash slash followed by a domain in the PATHINFO to the default URI...

VDG Security SENSE Authentication Bypass Vulnerability

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. An authentication bypass vulnerability exists in versions of VDG Security SENSE prior to 2.3.15, which allows remote attackers to pass authentication via characters in the encode:authorize HTTP header and...

DFLabs PTK Cross-Site Request Forgery Vulnerability

DFLabs PTK is a powerful collection of digital investigative, forensic tools. A cross-site request forgery vulnerability exists in versions of DFLabs PTK prior to 1.0.5, which allows remote attackers to hijack an administrator's or researcher's authentication to trigger a logout request...

Facebook HipHop Virtual Machine Expected Access Restriction Bypass Vulnerability

Facebook HipHop Virtual Machine is a HipHop virtual machine developed by Facebook Inc. that significantly improves PHP performance for loading dynamic pages. Facebook HipHop Virtual Machine versions prior to 3.1.0 suffer from an Expected Access Restriction Bypass vulnerability that allows remote...

Maxthon Cloud Browser application Address Bar Spoofing Vulnerability

Maxthon is a versatile, personalized multi-tab browser based on the IE kernel. An address bar spoofing vulnerability exists in Maxthon Cloud Browser application versions prior to 4.1.6.2000, which allows remote attackers to spoof the address bar via JavaScript code crafted to use API history...

CVE-2014-9032

Cross-site scripting XSS vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Adobe AIR Multiple Vulnerabilities (APSB14-24) - Mac OS X

Adobe AIR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer"; ifdescription...