Kirby Panel Cross-Site Scripting Vulnerability

Kirby is a file-based CMS Content Management System system. panel is one of the control panel components. A cross-site scripting vulnerability exists in Kirby Panel versions prior to 2.3.3, 2.4.x versions prior to 2.4.2 and 2.5.x versions prior to 2.5.7. A remote attacker can exploit this...

Inedo BuildMaster Cross-Site Scripting Vulnerability

Inedo BuildMaster is a suite of automated deployment software from Inedo USA. The software integrates a variety of tools to automate the deployment of application suites. A cross-site scripting vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2. A remote attacker can exploit thi...

PT-2017-3964 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.15.0-91.92 Description: The issue is related to the lack of protection for service data in the i915 module of the Linux kernel, which can be exploited to gain unauthorized access to protected information. This...

Apache Roller XML-RPC protocol support XML injection vulnerability

Apache Roller is the United States Apache Apache Software Foundation's set of feature-rich multi-user blogging platform. XML-RPC protocol support is one of the XML-RPC transport protocol support component. A security vulnerability exists in the XML-RPC protocol support in Apache Roller versions...

OpenEMR elevation of privilege vulnerability (CNVD-2017-35899)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in versions of OpenEMR pri...

PT-2017-4218 · Vim +4 · Vim +4

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 8.0.1263 Description: The issue is related to the fileio.c component in Vim, which sets the group ownership of a .swp file to the editor's primary group. This can allow local users to obtain sensitive information by...

WordPress PopCash.Net Code Integration Tool plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . PopCash.Net Code Integration Tool plugin is used in one of the code integration tool . A cross-site scripting...

Quagga Denial of Service Vulnerability (CNVD-2017-35655)

Quagga is a routing software suite developed by American software developer Kunihiro Ishiguro. The suite implements OSPFv2, OSPFv3, RIP v1/v2 and other protocols on multiple platforms and provides route redistribution, route mapping and other features. A security vulnerability exists in the...

Redmine Information Disclosure Vulnerability (CNVD-2017-31951)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . An information disclosure vulnerability exists in Redmine versions prior to 3.2.6 and 3.3.x prior to...

Redmine cross-site scripting vulnerability (CNVD-2017-31954)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in Redmine versions prior to 3.2.6 and 3.3.x prior to 3.3.3...

Symantec Endpoint Encryption Denial of Service Vulnerability

Symantec Endpoint Encryption is a suite of software from Symantec that provides advanced encryption and management capabilities for desktops, laptops, and removable storage devices. A security vulnerability exists in Symantec Endpoint Encryption SEE versions prior to 11.1.3HF2. A remote attacker...

KeystoneJS Cross-Site Scripting Vulnerability (CNVD-2017-32889)

KeystoneJS is an open source framework for developing database-driven websites, applications and APIs. A cross-site scripting vulnerability exists in the fields/types/markdown/MarkdownType.js file in versions of KeystoneJS prior to 4.0.0-beta.7. A remote attacker can exploit this vulnerability to...

Juniper Junos Space HTML Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An HTML injection vulnerability exists in Juniper Junos Space versions prior to 17.1R1. A...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2017-30335)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site scripting vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to adequately filter data. A remote attacker can exploit this vulnerability to execute arbitrary HTML or scrip...

Inedo ProGet Design Vulnerability

Inedo ProGet is a general-purpose package manager from Inedo Japan with package management, filtering and upgrading features. A security vulnerability exists in Inedo ProGet versions prior to 4.7.14, which stems from the program's failure to properly handle malicious packet IDs.No information is...

libpgf Double Release Vulnerability

libpgf is an image file format that can be used for lossy/lossless compression. A double release vulnerability exists in the Decoder.cpp file in versions of libpgf prior to 6.15.32. No information about this vulnerability is available at this time...

Kanboard Design Vulnerability (CNVD-2017-30947)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Mozilla Firefox Installation Spoofing Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Installation is one of the installation and configuration programs. A security vulnerability exists in Mozilla Firefox installation in versions prior to Mozilla Firefox 56. The vulnerability can be...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-32534)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 56. A remote attacker can exploit the vulnerability to bypass the Xray wrapper protection mechanism...

Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22)

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications ARIA elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox 56, Firefox ESR 52.4, and Thunderbird 52.4...