3954 matches found
CVE-2018-12630
NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...
PayPal (Notify) - Bypass & Persistent Web Vulnerability
Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-21 Vulnerability...
Salesforce RegistrationForm - Persistent Web Vulnerability
Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-21 Vulnerability Laboratory ID VL-ID:...
Artica Pandora FMS Information Disclosure Vulnerability (CNVD-2018-23787)
Artica Pandora FMS Flexible Monitoring System is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS. The vulnerability can be exploited to ca...
goserv directory traversal vulnerability
goserv is an HTTP server. A directory traversal vulnerability exists in goserv. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...
AKCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-14262)
AKCMS is a lightweight content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in AKCMS version 6.1. An attacker can exploit this vulnerability to add an administrator account with the help of...
Security Bulletin: IBM Security Access Manager for Web is affected by a vulnerability in nss-util (CVE-2016-1950)
Summary Network Security Services NSS, which is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. A heap-based buffer overflow vulnerability in the NSS libraries affects IBM Security Access Manager for Web. Vulnerability...
Security Bulletin: OpenSource MIT Kerberos Vulnerabilities affect IBM Security Access Manager for Web (CVE-2015-2695, CVE-2015-2696)
Summary IBM Security Access Manager for Web is affected by MIT Kerberos vulnerabilities. Vulnerability Details CVEID: CVE-2015-2695 DESCRIPTION: MIT Kerberos is vulnerable to a denial of service, caused by a pointer type error in the GSS-API library. By sending a specially crafted gssinquireconte...
CVE-2018-11222
Local File Inclusion LFI in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandoraconsole/ajax.php ajax endpoint...
nfse.caetite.ba.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-632768 Description| Value ---|--- Affected Website:| nfse.caetite.ba.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
OEcms 3.1 - Cross-Site Scripting
Title: OEcms 3.1 - Cross-Site Scripting Author: Felipe "Renzi" Gabriel Date: 2018-06-15 Software: OEcms v3.1 CVE: CVE-2018-12095 Technical Details & Description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the "OEcms v3.1" web-application. The vulnerability is locate...
Dimofinf CMS 3.0.0 - Cross-Site Scripting
Dimofinf CMS 3.0.0 - Cross-Site Scripting Title: Dimofinf CMS 3.0.0 - Cross-Site Scripting Author: Felipe "Renzi" Gabriel Date: 2018-06-13 Software: Dimofinf CMS Version 3.0.0 CVE: CVE-2018-12094 A Reflected Cross-Site Scripting web vulnerability has been discovered in the "Dimofinf CMS"...
Samsung Web Viewer for Samsung DVR Cross-Site Scripting Vulnerability
Samsung smart Viewer is a TV connectivity software from Samsung. A cross-site scripting vulnerability in Samsung Web Viewer for Samsung DVR allows remote attackers to inject arbitrary web script or HTML using the vulnerability...
Shopify - (Link Return) Client Side Web Vulnerability
Document Title: =============== Shopify - Link Return Client Side Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1550 Release Date: ============= 2018-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 1550...
Cross site scripting
A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in the mod parameter of info.php...
Byucslabsix Directory Traversal Vulnerability
byucslabsix is an http server. A directory traversal vulnerability exists in byucslabsix. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...
Elding Directory Traversal Vulnerability
elding is a web server. A directory traversal vulnerability exists in elding. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system however, the accessible files are limited to those with file extensions. For example, sending a GET...
CVE-2016-9490
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability. Applications Manager is prone to a Cross-Site Scripting vulnerability in parameter LIMIT, in URL path /DiagAlertAction.do?REQTYPE=AJAX&LIMIT=1233. The URL is also...
CVE-2016-10684
healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if t...