3707 matches found
CVE-2017-15960
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...
Sql injection
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...
CVE-2017-15960
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...
CVE-2017-15960
Affected software: Article Directory Script 3.0. Vulnerability: SQL injection via the GET parameter id in author.php and category.php. Root cause: improper handling/sanitization of id leading to SQL command injection. Impact (per sources): high to critical across confidentiality, integrity, and a...
Multiple Logic Design Vulnerabilities in S-CMS v3.0
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS v3.0 there are multiple logical design vulnerabilities, an attacker can use the vulnerability over the right to view, pay and delete any order, as well as any article traversal and editing operatio...
Security Flaws in Children's Smart Watches
The Norwegian Consumer Council has published a report detailing a series of security and privacy flaws in smart watches marketed to children. Press release. News article. This is the same group that found all those security and privacy vulnerabilities in smart dolls. EDITED TO ADD 10/21: Slashdot...
2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x64-based Systems (KB4049179)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-10 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4049179)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB4049179)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-10 Dynamic Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4043961)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2017-10 Cumulative Update for Windows 10 Version 1709 for ARM64-based Systems (KB4043961)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-10 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4042895)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Veeam ONE installation fails with "Couldn't create crypto provider" message
Challenge Veeam ONE installation fails with "Couldn't create crypto provider" message. Cause One of the known issues with Microsoft update 3000850 as per this MS KB article is the following: Opening Credential Manager fails with error 0x80090345", that also affects creating the crypto provider...
Joomla! information disclosure vulnerability (CNVD-2017-35315)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in versions of Joomla! prior to 3.8.0. An attacker can exploit the vulnerability to obtain the article introduction...
Joomla! < 3.8.0 Information Disclosure Vulnerability
Joomla is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
Information disclosure
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...