CVE-2018-6016

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6016

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

Catalyst Mahara Anonymous Comments Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 1.9 before 1.9.7, 1.10 before 1.10.5, and 15.04 before 15.04.2. An attacker could exploit...

CVE-2012-2247

Cross-site scripting XSS vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a crafted SVG file...

Cross site scripting

Cross-site scripting XSS vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php...

Уязвимости в Artefact St. CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Brute Force и Full path disclosure уязвимостях в системе Artefact St. CMS. Это украинская коммерческая CMS. XSS WASC-08: http://site/search/?s=3Cscript3Ealertdocument.cookie3C/script3E Brute Force WASC-11: http://site/admin/...

Artefact St. CMS Cross Site Scripting / Path Disclosure

I want to warn you about Cross-Site Scripting, Brute Force and Full path disclosure vulnerabilities in Artefact St. CMS. It's Ukrainian commercial CMS. SecurityVulns ID: 11531. ------------------------- Affected products: ------------------------- Vulnerable are all versions of Artefact St. CMS a...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

Code injection

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

CVE-2009-2171 affects Mahara 1.1 prior to 1.1.5. The root cause is missing permission checks when saving a view that contains artefacts, enabling remote authenticated users to read another user’s artefact (information disclosure). The issue is documented across multiple feeds (NVD entry and Red H...