6103 matches found
CVE-2016-1000130
Reflected XSS in wordpress plugin e-search v1.0...
Mobiketa Cross-Site Request Forgery Vulnerability
Mobiketa is a full-featured SMS and language management software. A cross-site request forgery vulnerability exists in index/php in Mobiketa version 1.0, which can be exploited by remote attackers to perform unauthorized operations and gain access to the affected application...
iSQL isql_main.c Buffer Overflow Vulnerability
iSQL is an interpreter of SQL that interprets and executes SQL commands to create small databases. A buffer overflow vulnerability exists in iSQL version 1.0, which can be exploited by an attacker to execute arbitrary code...
Microsoft Windows SMB Server Remote Code Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An authenticated remote code execution vulnerability exists in the SMBv1 server in Microsoft Windows. A remote attacker can exploit this...
Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability
Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. A remote code execution vulnerability exists in Cisco APIC-EM version 1.0. An attacker could...
DEBIAN-CVE-2016-5353
epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability
Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.Packet Data Network Gateway aka PGW is one of the packet data gateways. A security vulnerability exists in the General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 implementation of the Cisco ASR 5000...
CVE-2016-4165
The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...
Adobe Brackets Cross-Site Scripting Vulnerability
Adobe Brackets is the United States Odo than Adobe company's set of open source based on HTML/CSS/JavaScript development and run on the native shell on the integrated development environment . Cross-site scripting vulnerability exists in Adobe Brackets 1.6 and earlier versions for Windows,...
CVE-2016-2023
HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors...
WordPress WP External Links plugin cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WP External Links version 1.80. An attacker is able to inject malicious script...
NTT Photopt App Man-in-the-Middle Attack Vulnerability
NTT Photopt App is a suite of applications for managing photos from the NTT Nippon Telegraph and Telephone Corporation group in Japan. A security vulnerability exists in NTT Photopt App version 1.0.0 and 1.1.0, which can be exploited by attackers to conduct man-in-the-middle attacks and listen to...
The vulnerability of the Samba file system allows a perpetrator to modify any list of access controls they desire.
The vulnerability of the SMB1 component “smbd” of the Samba file system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to modify arbitrary access control lists by using the UNIX SMB1 protocol to create symbolic links...
CVE-2016-2278
Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh aka Minimal Shell protection mechanism...
BSA-2016-003
Summary Security Advisory ID : BSA-2016-003 Component : glibc Revision : 1.0 N/A...
CVE-2016-1986
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)
A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...
Framework Session package Arbitrary Code Execution Vulnerability
Joomla! Framework is the U.S. Open Source Matters team developed a set of Web applications written in PHP framework , Session is one of the packages used for the session layer . A security vulnerability exists in the Joomla! Framework Session package version 1.3.1 prior to version 1.x. A remote...
UBUNTU-CVE-2015-4515
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message...
