PHP Scripts Mall Readymade Video Sharing Script HTTP Injection Vulnerability

PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. An HTML injection vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script version 3.2. An attacker can exploit this vulnerability to inject HTML co...

Moodle Information Disclosure Vulnerability (CNVD-2017-37856)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An information disclosure vulnerability exists in the Moodle 3.x version. An attacker can exploit this vulnerability to enumerate the...

DEBIAN-CVE-2017-16844

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than...

MSA vot.Ar 'parse' function unauthorized operation vulnerability

MSA vot.Ar is a suite of voting election applications. A security vulnerability exists in the 'parse' function in MSA vot.Ar version 3.1. An attacker in close physical proximity could exploit this vulnerability to cast multiple votes for a candidate with the help of a specially designed RFID voti...

Mailing List Manager Pro SQL Injection Vulnerability

Mailing List Manager Pro is an email marketing system. The system features mailing list building, address book editing and autoresponders. A SQL injection vulnerability exists in Mailing List Manager Pro version 3.0. A remote attacker can exploit the vulnerability by sending SQL injection command...

YxtCMF v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 has a SQL injection vulnerability in the frontend ShitiController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Integrated Lights Out Manager (CNVD-2017-31862)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle Integrated Lights Out Manager ILOM is one of the server management tools. An unspecified vulnerability exists in the System Management subcomponent of the Oracle ILOM component of the Oracle Sun...

LetoDMS SQL Injection Vulnerability (CNVD-2017-35203)

LetoDMS is a document management system based on PHP+MySQL development. A SQL injection vulnerability exists in LetoDMSCore/Core/inc.ClassDMS.php in LetoDMS before version 3.3.8, which can be exploited by remote attackers to execute arbitrary SQL commands...

PT-2017-19308 · Siemens · Siemens Talon Tc Bacnet Automation Controllers +1

Name of the Vulnerable Software and Affected Versions: Siemens APOGEE PXC and TALON TC BACnet Automation Controllers versions prior to V3.5 Description: A directory traversal issue could allow a remote attacker with network access to the integrated web server to obtain information on the structur...

Cybele Software Thinfinity Remote Desktop Workstation Directory Traversal Vulnerability

Cybele Software Thinfinity Remote Desktop Workstation is a browser-based remote desktop tool from Cybele Software, USA. A directory traversal vulnerability exists in Cybele Software Thinfinity Remote Desktop Workstation version 3.0.0.3 32-bit and 64-bit. A remote attacker can exploit this...

DEBIAN-CVE-2015-3420

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-34577)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

Moodle cross-site scripting vulnerability (CNVD-2017-27611)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the contact form on the 'non-respondent...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

Tcpdump OSPFv3 Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.OSPFv3 parser is one of the open shortest path first protocol parsers....

UBUNTU-CVE-2017-13036

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-32462)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

Liblouis Denial of Service Vulnerability (CNVD-2017-28739)

Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. A security vulnerability exists in the 'lougetALine' function in compileTranslationTable.c:346 in Liblouis version 3.2.0. A remote attacker can exploit this vulnerability to cause...

Liblouis Read Across Boundaries Vulnerability

Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. An out-of-bounds read vulnerability exists in the 'lougetALine' function of compileTranslationTable.c:343 in Liblouis version 3.2.0. A remote attacker could exploit this...

Reflected Cross-Site Scripting Vulnerability in S-CMS V3.0 build20170808 /admin/demo.asp Page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in the /admin/demo.asp page in S-CMS V3.0 build20170808. This vulnerability allows an attacker to construct XSS statements and perform pop-up box...