Siemens RuggedCom NMS Cross-Site Scripting Vulnerability

RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site scripting vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by attackers to launch a cross-site scripting attack a...

Apple Safari Open Redirect Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 10.0.3. The vulnerability can be exploited by an attacker to spoof a trusted web source URL a...

Linux kernel 'include/linux/init_task.h' denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the file include/linux/inittask.h in versions of Linux kernel prior to 2.6.35. This vulnerability can be exploited by a local attacker to...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

ALPINE-CVE-2016-7933

The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppphdlcifprint...

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2017-00751)

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, also known as Bug 101813...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2017-00752)

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors also known as bug 102637...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-00617)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wp-admin/update-core.php file in WordPress before 4.7.1. A...

Information disclosure

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

Borg Spoofing Vulnerability

Borg is a deduplication backup program that supports compression and authentication encryption, among other things. A security vulnerability exists in versions of Borg prior to 1.0.9, which stems from an error in the encryption protocol used to validate manifests archive lists. An attacker could...

PHPMailer Remote Code Execution Vulnerability (CNVD-2017-00052)

PHPMailer is a PHP class library for sending e-mail . A remote code execution vulnerability exists in versions of PHPMailer prior to 5.2.20, which can be bypassed due to a filter function used in official PHPMailer patches. A remote attacker can exploit this vulnerability to execute arbitrary cod...

SwiftMailer Remote Code Execution Vulnerability

SwiftMailer is a package of PHP functions for sending e-mail. A remote code execution vulnerability exists in versions of SwiftMailer prior to 5.4.5-DEV, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

PT-2023-16824 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam/phpipam versions prior to 1.5.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

w3m denial of service vulnerability (CNVD-2016-13124)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-33. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and crash with the help of specially crafted HTML pages...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2016-12690)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

Mozilla Firefox WebVR Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker can exploit this vulnerability to execute arbitrary code...

Apple macOS Sierra Bluetooth Component Arbitrary Code Execution Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of Apple macOS Sierra versions prior to 10.12.2. The vulnerability can be exploited to execute arbitra...

ALPINE-CVE-2016-9862

An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions prior to 4.6.5 are affected...

UBUNTU-CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...