97 matches found
Ipswitch WS_FTP Professional < 12.6.0.3 Local Buffer Overflow Vulnerability
Ipswitch WSFTP Professional is prone to a local buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Redmine cross-site scripting vulnerability (CNVD-2017-31958)
Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in the app/views/timelog/list.html.erb file in Redmine...
EZZY APP Android version of the deposit function module has a payment design loophole
EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. The Android version of EZZY APP has a vulnerability in the amount payment design. After logging into the system, an attacker can arbitrarily modify the size of the payment amount by clicking on the paymen...
Multiple XSS Vulnerabilities in PHPSHE B2C Mall System v1.5
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. Multiple XSS vulnerabilities exist in PHPSHE B2C Mall System v1.5. An attacker can exploit this vulnerability to obtain information such as login cookies of administrative...
The vulnerability of the Samsung operating system allows a perpetrator to elevate their privileges or trigger an emergency system shutdown.
The vulnerability of the Samsung Mobile operating system’s Telecom application is related to exceptions handling deficiencies. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown of the system enabling DoS attacks or increase their privileges...
Name parameter SQL injection vulnerability in Wipro's Chinese scientific and technical journal system/index.asp page
Ltd, formerly known as Database Research Center of Chongqing Branch of China Science and Technology Information Research Institute, is a Chinese periodical database research organization in China. The name parameter SQL injection vulnerability in Wipro's Chinese scientific and technical journal...
SnipSnap 0.5.2 HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11180/info SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to...
UBUNTU-CVE-2013-4729
import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...
Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...
Apple Safari Rendering Object Body Detachment Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...
Adobe Acrobat Reader tesselate.x3d Multimedia Playing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
RealNetworks RealPlayer Cook Codec Initialization Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...
WoW Raid Manager Cross-Site Scripting Vulnerability
The host is installed with WoW Raid Manager and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodwowraidmanagerxssvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoW Raid Manager Cross-Site Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...
[Full-disclosure] MSN Plus Password Change Security Bypass Vulnerability
Title: MSN Plus Password Change Security Bypass Vulnerability Risk: Medium Date: 07.04.2005 Publisher: m0fo editor at sec.org.il Source: http://sec.org.il/articles.php?a=187 Vendor: http://www.msgplus.net MSN Plus is additional application for the MSN Messenger. Msn Plus is adding a lot of option...
BugPort Attached File Handling Unspecified Issue
The remote host seems to be running BugPort, an open source web-based system to manage tasks and defects throughout the software development process. This version of BugPort contains an unspecified attachment handling flaw. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
SnipSnap 0.5.2 - HTTP Response Splitting
SnipSnap 0.5.2 - HTTP Response Splitting source: https://www.securityfocus.com/bid/11180/info SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to...
Weak Token in Mail.Com Application Allows Compromise of Arbitrary User's Data
Weak Token in Mail.Com Application Allows Compromise of Arbitrary User's Data Black Watch Labs Security Advisory 00-02 March 6, 2000 Name: Weak Token in Mail.Com Application Allows Compromise of Arbitrary User's Data Black Watch Labs ID: BWL-00-02 Date Released: March 6, 2000 Category: Applicatio...