[SECURITY] Fedora 21 Update: php-guzzle-Guzzle-3.9.3-5.fc21

Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...

[SECURITY] Fedora 22 Update: php-guzzle-Guzzle-3.9.3-5.fc22

Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...

[SECURITY] Fedora 23 Update: php-guzzle-Guzzle-3.9.3-5.fc23

Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...

Foreman Security Mechanism Bypass Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.7.5. A remote attacker could exploit this...

[SECURITY] Fedora 22 Update: opensaml-java-openws-1.5.5-2.fc22

The OpenWS library provides a growing set of tools to work with web service s at a low level. These tools include classes for creating and reading SOAP messages, transport-independent clients for connecting to web services, and various transports for use with those clients...

[SECURITY] Fedora 21 Update: opensaml-java-openws-1.5.5-2.fc21

The OpenWS library provides a growing set of tools to work with web service s at a low level. These tools include classes for creating and reading SOAP messages, transport-independent clients for connecting to web services, and various transports for use with those clients...

The vulnerability of the Moodle learning management system allows a hacker to view protected information about scheduled events.

The vulnerability of the calendar/externallib.php component in the Moodle learning management system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to access sensitive information about scheduled events...

WideImage Version Detection

Detects the installed version of WideImage. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

Webservice-DIC yoyakuv41 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection

WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez...

File Upload Vulnerability in Panmicro E-office /webservice/upload.php

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A file upload vulnerability exists in Panmicro E-ofrvice/upload.php, which allows attackers to exploit the vulnerability to upload arbitrary files and gain control of the server...

The vulnerability of the Cisco ASA access control system allows a intruder to trigger a service failure.

The vulnerability of the REST interface of the Cisco ASA access control system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending numerous requests...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to obtain information about the accessibility of internal network services.

The vulnerability of the SAP NetWeaver software integration platform exists due to insufficient restrictions on access to the GetSecNetworkId method SAPControl. Exploiting this vulnerability allows a malicious actor to obtain information about the availability of internal network services through...

wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487)

It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption CVE-2011-2487 threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote...

File Containment Vulnerability in Hangzhou Ancai Network Reimbursement System

Hangzhou Ancai Network Reimbursement System is an online reimbursement system that supports online bill of lading and online approval for employees, bidding farewell to paper transmission and improving the timeliness, safety and standardization of information transmission. A file inclusion...

File Containment Vulnerability in Hangzhou Ancai Network Reimbursement System (CNVD-2017-02374)

Hangzhou Ancai Network Reimbursement System is an online reimbursement system that supports online bill of lading and online approval for employees, bidding farewell to paper transmission and improving the timeliness, safety and standardization of information transmission. A file inclusion...

McAfee ePolicy Orchestrator Product Configuration Feature Cross-Site Scripting Vulnerability

McAfee ePolicy Orchestrator is an industry-leading systems security management solution that helps organizations effectively defend against a wide range of malicious threats and attacks. A cross-site scripting vulnerability exists in the Product Configuration feature of the McAfee ePolicy...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...

Moodle 'lib/externallib.php' Cross-Site Scripting Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the 'externalformattext' function in the Moodle 'lib/externallib.php' script. A remote...

php: type confusion issue in unserialize() with various SOAP methods

Multiple flaws were discovered in the way PHP's Soap extension performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to disclose portion of its memory or crash...