WordPress WP External Links plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WP External Links version 1.80. An attacker is able to inject malicious script...

NTT Photopt App Man-in-the-Middle Attack Vulnerability

NTT Photopt App is a suite of applications for managing photos from the NTT Nippon Telegraph and Telephone Corporation group in Japan. A security vulnerability exists in NTT Photopt App version 1.0.0 and 1.1.0, which can be exploited by attackers to conduct man-in-the-middle attacks and listen to...

The vulnerability of the Samba file system allows a perpetrator to modify any list of access controls they desire.

The vulnerability of the SMB1 component “smbd” of the Samba file system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to modify arbitrary access control lists by using the UNIX SMB1 protocol to create symbolic links...

CVE-2016-2278

Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh aka Minimal Shell protection mechanism...

BSA-2016-003

Summary Security Advisory ID : BSA-2016-003 Component : glibc Revision : 1.0 N/A...

CVE-2016-1986

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Framework Session package Arbitrary Code Execution Vulnerability

Joomla! Framework is the U.S. Open Source Matters team developed a set of Web applications written in PHP framework , Session is one of the packages used for the session layer . A security vulnerability exists in the Joomla! Framework Session package version 1.3.1 prior to version 1.x. A remote...

UBUNTU-CVE-2015-4515

Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message...

VulnCheck KEV: CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...

Moxa SoftCMS Buffer Overflow Vulnerability

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Buffer overflow vulnerabilities exist in Moxa SoftCMS version 1.3 and earlier. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Wireshark 'epan/packet.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the dissector-table implementation in the epan/packet.c file in Wireshark versions 1.12.7 prior to 1.12.x. The vulnerability can be exploited to...

UBUNTU-CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...

IBM MQ Light Denial of Service Vulnerability (CNVD-2015-05120)

IBM MQ Light is a messaging service from IBM USA based on IBM Bluemix, a PaaS platform for creating, deploying and managing applications on the cloud. A security vulnerability exists in IBM MQ Light versions 1.0 and 1.0.0.1 due to the program failing to properly handle authentication credentials....

Research Artisan Lite Cross-Site Scripting Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A cross-site scripting vulnerability exists in Research Artisan Lite versions prior to 1.18. The vulnerability can be exploited by remote attackers to inject...

Cisco Identity Services Engine Security Bypass Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security bypass...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the krb5-debuginfo-1.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the minicom-1.83.1 operating system from Red Hat Linux can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

EMC PowerPath Virtual Appliance Information Disclosure Vulnerability

EMC PowerPath Virtual Appliance aka vApp is a host-based path optimization software from EMC. The software provides automated data path management, failover and recovery, and load balancing optimization in both physical and virtual environments. A security vulnerability exists in EMC PowerPath...

PT-2015-4258 · D Link · D-Link Dcs-2103

Name of the Vulnerable Software and Affected Versions: D-link IP camera DCS-2103 versions prior to 1.20 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING to "vb.htm". Recommendations: For versions prior to 1.20, updat...