kernel security and bug fix update

3.10.0-693.11.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.11.1 - powerpc perf: Fix book3s kernel to userspace backtraces Gustavo...

zen-cart.wang Open Redirect vulnerability

Open Bug Bounty ID: OBB-317665 Description| Value ---|--- Affected Website:| zen-cart.wang Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2015-8352

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...

Directory traversal

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...

CVE-2015-8352

CVE-2015-8352 affects Zen Cart 1.5.4 and is a Local File Inclusion vulnerability triggered by directory traversal in the Ajax endpoint. The flaw occurs in the /ajax.php act parameter processing, allowing remote, unauthenticated attackers to include and execute arbitrary local PHP files, potential...

CVE-2015-8352

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...

Actian Pervasive PSQL and Zen Heap Buffer Overflow Vulnerabilities

Actian Pervasive PSQL and Zen are both products of Actian Corporation, an ACID-compliant database management system, and Zen, an embedded database. A heap buffer overflow vulnerability exists in Actian Pervasive PSQL version 12.10 and Zen version 13. A remote attacker can exploit this vulnerabili...

Heap overflow

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-11757

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-11757

CVE-2017-11757 describes a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13. The issue occurs in the _srvLnaConnectMP1 function and is triggered by crafted traffic to TCP port 1583 after the Server-Client encryption-key exchange. The underlying cause is an integer underflow ...

CVE-2017-11757

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

Cross site scripting

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

Zen Cart 1.6.0 is affected by a cross-site scripting (XSS) vulnerability in index.php where the products_id parameter can be used to inject script. The provided documents confirm the issue but do not include exploitation details, affected versions beyond Zen Cart 1.6.0, or specific root-cause cod...

[ASA-201706-30] linux-zen: privilege escalation

Arch Linux Security Advisory ASA-201706-30 ========================================== Severity: High Date : 2017-06-23 CVE-ID : CVE-2017-1000364 Package : linux-zen Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-324 Summary ======= The package linux-zen before...

Zen Cart Cross-Site Scripting Vulnerability (CNVD-2017-08298)

Zen Cart is an open source shopping cart system developed by Zen Cart team. The system is mainly used to establish an online store , can support a variety of payment methods , multi-language options , online shopping mall batch update and so on. A cross-site scripting vulnerability exists in the...

CVE-2017-8833

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...

Design/Logic Flaw

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...