PT-2019-11705 · Jenkins · Jenkins Azure Publishersettings Credentials Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Azure PublisherSettings Credentials Plugin versions 1.2 and earlier Jenkins Azure PublisherSettings Credentials Plugin versions prior to 1.5 Description: The issue concerns the storage of credentials in an unencrypted manner within th...

GHSA-J53J-GMR9-H8G3 Comparison errorr in org.apache.tika:tika-core

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

UBUNTU-CVE-2018-1308

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion XXE in the &dataConfig= parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the...

Novell Filr Cross-Site Scripting Vulnerability (CNVD-2016-05959)

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site scripting vulnerability exists in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier. The vulnerability can be exploited by a remote attacker to inject arbitrary we...

CVE-2011-1957

The dissectdcmmain function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service infinite loop via an invalid PDU length...

Mahara Cross Site Scripting and Cross Site Request Forgery Vulnerabilities

This host is running Mahara and is prone to cross site scripting and cross site request forgery vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmaharaxssncsrfvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Mahara Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors:...

DEBIAN-CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

CVE-2009-2084

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...

PT-2009-4392 · Cpcommerce · Cpcommerce

Name of the Vulnerable Software and Affected Versions: cpCommerce versions 1.2.x, possibly including 1.2.9 Description: The issue allows remote attackers to bypass a protection mechanism, enabling them to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, o...

Astanda Directory Project 1.2 - 'link_id' SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmaildotorg Website: www.youknowz.info Script: Astanda Directory Project Bug: APD Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script Information...

Shop-Script FREE <= 2.0 Remote Command Execution Exploit

No description provided by source. ?php Shop-Script FREE = 2.0 Remote Command Execution Exploit by InATeam tested on versions 1.2 and 2.0 works regardless magicquotesgpc=on Greetz: eXp, Kuzya, cxim, Russian, ENFIX echo "--------------------------------------------------------\n"; echo "Shop-Scrip...

PT-2007-3208 · Apache +1 · Apache Tomcat Jk Web Server Connector +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat JK Web Server Connector versions 1.2.x through 1.2.22 Description: The issue allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. dot dot sequences and directory...

PT-2005-2575 · Fusion · Fusion Sbx

Name of the Vulnerable Software and Affected Versions: Fusion SBX versions 1.2 and earlier Description: The issue concerns the improper use of the extract function in index.php, allowing remote attackers to bypass authentication by setting the is logged parameter or execute arbitrary code via the...

PT-2004-2510 · Proftpd · Proftpd

Name of the Vulnerable Software and Affected Versions: ProFTPD versions 1.2.x through 1.2.10 ProFTPD versions prior to 1.2.11 Description: The issue allows remote attackers to identify valid usernames by timing the server response, as the server responds in a different amount of time when a given...