PT-2016-7514 · Libcsp · Libcsp

Name of the Vulnerable Software and Affected Versions: libcsp library version 1.4 and earlier Description: The issue is related to a buffer overflow in the csp can process frame function in csp if can.c. This allows hostile components connected to the canbus to execute arbitrary code by sending a...

Cgiemail Source Code Disclosure Vulnerability

CGIEmail is a WEB-based mail processing system. A source code disclosure vulnerability exists in Cgiemail version 1.6, which allows an attacker to retrieve the source code of a script file e.g., PL, CGI, and BAT from the server by sending a specially crafted request that contains square brackets...

Wordpress simple-image-manipulator plugin remote file download vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. simple-image-manipulator is one of the image manipulator plugin. A remote file download vulnerability exists in Wordpress simple-image-manipulator plugin v1.0, which can be exploited by...

TLS SHA-1 Spoofing Attack Vulnerability

TLS full name Transport Layer Security is a set of protocols used to provide confidentiality and data integrity between two communicating applications. A security vulnerability exists in SHA-1 in TLS version 1.2. This vulnerability can be exploited by an attacker to perform spoofing attacks...

CVE-2016-1000145

Reflected XSS in wordpress plugin pondol-carousel v1.0...

CVE-2016-1000138

Reflected XSS in wordpress plugin indexisto v1.0.5...

CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0...

Mobiketa Cross-Site Request Forgery Vulnerability

Mobiketa is a full-featured SMS and language management software. A cross-site request forgery vulnerability exists in index/php in Mobiketa version 1.0, which can be exploited by remote attackers to perform unauthorized operations and gain access to the affected application...

iSQL isql_main.c Buffer Overflow Vulnerability

iSQL is an interpreter of SQL that interprets and executes SQL commands to create small databases. A buffer overflow vulnerability exists in iSQL version 1.0, which can be exploited by an attacker to execute arbitrary code...

Microsoft Windows SMB Server Remote Code Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An authenticated remote code execution vulnerability exists in the SMBv1 server in Microsoft Windows. A remote attacker can exploit this...

Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability

Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. A remote code execution vulnerability exists in Cisco APIC-EM version 1.0. An attacker could...

DEBIAN-CVE-2016-5353

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability

Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.Packet Data Network Gateway aka PGW is one of the packet data gateways. A security vulnerability exists in the General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 implementation of the Cisco ASR 5000...

CVE-2016-4165

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

Adobe Brackets Cross-Site Scripting Vulnerability

Adobe Brackets is the United States Odo than Adobe company's set of open source based on HTML/CSS/JavaScript development and run on the native shell on the integrated development environment . Cross-site scripting vulnerability exists in Adobe Brackets 1.6 and earlier versions for Windows,...

CVE-2016-2023

HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors...

WordPress WP External Links plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WP External Links version 1.80. An attacker is able to inject malicious script...

NTT Photopt App Man-in-the-Middle Attack Vulnerability

NTT Photopt App is a suite of applications for managing photos from the NTT Nippon Telegraph and Telephone Corporation group in Japan. A security vulnerability exists in NTT Photopt App version 1.0.0 and 1.1.0, which can be exploited by attackers to conduct man-in-the-middle attacks and listen to...

The vulnerability of the Samba file system allows a perpetrator to modify any list of access controls they desire.

The vulnerability of the SMB1 component “smbd” of the Samba file system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to modify arbitrary access control lists by using the UNIX SMB1 protocol to create symbolic links...