CVE-2016-3211

CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...

CVE-2016-1690

CVE-2016-1690 affects Google Chrome Autofill: the interaction between field updates and JavaScript that triggers a frame deletion allows remote attackers to cause a use-after-free DoS (and possibly other impact) via a crafted website. Affected versions are prior to 51.0.2704.63 (and related advis...

OurPHP Backend Web Feature Management SQL Injection Vulnerability

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OurPHP OurPHP management background global column under the website function management module in the configuration of saving the anti-injection processing of the pag...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-03678)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange AppSuite 7.8.0 and...

AVAST (Business) #17 - Persistent Web Vulnerability

Document Title: =============== AVAST Business 17 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1634 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================== 1634 Comm...

Docker UI Cross-Site Request Forgery Vulnerability

Docker is an open source application container engine. A cross-site request forgery vulnerability exists in Docker UI, which can be exploited by an attacker to trick a logged-in user into clicking on a specially crafted malicious url, resulting in a cross-site request forgery attack...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2016-03326)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle. An attacker could exploit...

Peplink InControl 2 CDM - (API) Persistent Vulnerability

Document Title: =============== Peplink InControl 2 CDM - API Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1841 Release Date: ============= 2016-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 184...

Opendocman HTML Injection Vulnerability

OpenDocMan is a versatile Web-based document management system DMS written in PHP and designed to follow the ISO 17025/IEC standard. OpenDocMan suffers from an HTML injection vulnerability due to the setting of filters to filter user input. An attacker may perform elevation of privilege or...

Open Real Estate Cross-Site Scripting Vulnerability

Open Real Estate CMS is a PHP-based content management system. A cross-site scripting vulnerability exists in Open Real Estate. An attacker can exploit the vulnerability to execute malicious script code...

LMCMS background arbitrary file download vulnerability

LMCMS Leming CMS system is a web content management system developed in Java language, developed by Beijing Leming Zhixin Technology Co., Ltd. and distributed under commercial license. LMCMS Leming CMS system's management background under the full media library section of the file management to...

Trend Micro (Direct Pass) - Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1717 Trend Micro Security ID: 1-1-1039900153 Release Date: ============= 2016-05-10 Vulnerability Laboratory ID VL-ID:...

Trend Micro (Direct Pass) - Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1717 Trend Micro Security ID: 1-1-1039900153 Release Date: ============= 2016-05-09 Vulnerability Laboratory ID VL-ID:...

EMC RSA Data Loss Prevention Cross-Site Scripting Vulnerability

EMC RSA Data Loss Prevention DLP is a data loss prevention product from EMC Corporation. The product is used to discover and monitor the location and flow of sensitive data such as customer credit card data, employee PII, or company intellectual property and provides features such as user trainin...

Acunetix WVS 10 - Remote Command Execution

Acunetix WVS 10 - Remote Command Execution ''' Acunetix WVS 10 - Remote command execution SYSTEM privilege - Author: Daniele Linguaglossa Overview ========= Acunetix WVS 10 1 is an enterprise web vulnerability scanner developer by Acunetix Inc. Two major flaws exists in the last version of...

Trend Micro Email Spoofing

Document Title: =============== Trend Micro Account - Email Spoofing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1693 Trend Micro ID: 1-1-1035655030 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Sophos XG Firewall (SF01V) Cross Site Scripting

Document Title: =============== Sophos XG Firewall SF01V - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1734 ID: 5740075 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

C And C++ For OS Filter Bypass / Script Insertion

Document Title: =============== C & C++ for OS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1825 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID: ====================================...

Sophos XG Firewall (SF01V) - Persistent Web Vulnerability

Document Title: =============== Sophos XG Firewall SF01V - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1734 ID: 5740075 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Trend Micro (Account) - Email Spoofing Web Vulnerability

Document Title: =============== Trend Micro Account - Email Spoofing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1693 Trend Micro ID: 1-1-1035655030 Release Date: ============= 2016-04-24 Vulnerability Laboratory ID VL-ID:...