59 matches found
The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in Adobe Flash Player allows a malicious individual to execute arbitrary code or cause a service failure a memory corruption error...
Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03224)
Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center to provid...
Scout Portal Toolkit 1.3.1 - SPT-BrowseResources.php ParentId Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the...
tekno.Portal 0.1b - 'link.php' SQL Injection
source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. tekno.Portal 0.1b is...
WHMCompleteSolution (WHMCS) - 'boleto_bb.php' SQL Injection
source: https://www.securityfocus.com/bid/53711/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
'research_display.php' SQL Injection Vulnerability
researchdisplay.php is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
InterTech WCMS - etemplate.php SQL Injection
InterTech WCMS - etemplate.php SQL Injection source: https://www.securityfocus.com/bid/31350/info InterTech Web Content Management System WCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...
Microsoft Windows GDI 'CreateDIBPatternBrushPt' Function Heap Overflow Vulnerability
Description Microsoft Windows is prone to a heap-based overflow vulnerability that resides in the GDI graphics library and can be triggered by a malformed EMF or WMF image file. A successful exploit of this vulnerability can allow a remote attacker to completely compromise the affected computer...
PHP-Nuke 4nChat Module 0.91 - roomid SQL Injection
PHP-Nuke 4nChat Module 0.91 - roomid SQL Injection source: https://www.securityfocus.com/bid/28128/info The 4nChat module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
SkilMatch Systems JobLister3 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/25296/info JobLister3 is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...
Another You tube clone script vulnerability
ChX Security | Advisory 2 | ============= - "Generic YouTube Clone Script - XSRF: Arbitrary Code Injection" - Data | ====== Author: Pepepistola Pepepistolaatchxsecuritydotorg Program: Generic YouTube Clone Script Severity: Moderately Critical Type of Advisory: Mid Disclosure Affected/Tested...
Update Protection against AWStats Remote Command Execution Vulnerability
AWStats is a free tool that collects and graphically displays advanced web, ftp or mail server statistics. Lack of input validation on one of the parameters may allow an attacker to compromise a vulnerable server. Successful exploitation allows remote attackers to execute arbitrary commands under...
SaPHPLesson 2.0 - print.php SQL Injection
SaPHPLesson 2.0 - print.php SQL Injection source: https://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
ROS-2-464
2.464 Multiple vulnerabilities in Mozilla Firefox CVE-2021-23994, CVE-2021-23995, CVE-2021-23996, CVE-2021-23997, CVE-2021-23998, CVE-2021-23999, CVE-2021-24000, CVE-2021-24001, CVE-2021-24002, CVE-2021-29945, CVE-2021-29947, CVE-2021-29946. 1. Vulnerability Description: Vulnerabilities allow a...
Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 for Itanium-based Systems (KB2446704)
A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you m...
Security Update for .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2518869)
A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you m...
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2008 SP2 for Itanium-based Systems (KB2539633)
A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain access to information. You can help protect your computer by installing this update from Microsoft. After you install this item, you may...
Security Update for Windows Server 2003 for Itanium-based Systems (KB921883)
A security issue has been identified in the Server service that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
Security Update for SQL Server 2019 RTM CU (KB5068404)
Security issues have been identified in the SQL Server 2019 RTM CU that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...