2893 matches found
OpenLDAP 'servers/slapd/back-mdb/search.c' Denial of Service Vulnerability
OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States, which is included in Linux distributions. A denial-of-service vulnerability exists in OpenLDAP 'servers/slapd/back-mdb/search.c', which can be...
PT-2017-18822
Name of the Vulnerable Software and Affected Versions OpenLDAP versions 2.4.44 and earlier Description The issue allows a user with access to search the directory to crash slapd by issuing a search including the Paged Results control with a page size of 0. This is due to a double free vulnerabili...
CVE-2015-0269
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors...
CVE-2015-0269: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors...
PT-2017-6443
Name of the Vulnerable Software and Affected Versions Contao versions prior to 3.2.19 Contao versions 3.4.x prior to 3.4.4 Description A directory traversal issue allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors...
Password Reset
I changed my password on my Linux system and now I can't push/pull via Atlassian SourceTree 2.0.20.1 gui. I tried resetting via the authentication tab under Tools-Options but the password is not being saved. I can use git via command line via Terminal because I am prompted for a password. I...
Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data
A controversial bill that would allow organizations that have been breached to hack back has undergone revisions that include an exemption permitting victims to recover or destroy their data on an attacker’s infrastructure. Rep. Tom Graves R-GA introduced the updated Active Cyber Defense Certaint...
Huiwen opac of the library back door leads to the source of the leak
0x00 description Hui Wen libsys library opac system is a colleges and universities to use more of the system, the user has Xiamen University, Nanjing University, Dalian Polytechnic University, Nankai University and many other schools. The system used is Oracle + the php, not from public contact t...
Opsview Monitor Pro Open Redirect Vulnerability
Opsview Monitor Pro is a suite of enterprise-class network, server and application monitoring tools from Opsview UK. The tool can be integrated with monitoring systems such as Nagios Core, RRDTool and others. An open redirection vulnerability exists in Opsview Monitor Pro. A remote attacker can...
CVE-2016-10368
Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...
PT-2017-7884
Name of the Vulnerable Software and Affected Versions Opsview Monitor Pro versions prior to 5.1.0.162300841 Opsview Monitor Pro versions prior to 5.0.2.27475 Opsview Monitor Pro versions prior to 4.6.4.162391051 Opsview Monitor Pro version 4.5.x without a certain 2016 security patch Description T...
CVE-2016-10368: URL Redirection to Untrusted Site
Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...
Information disclosure
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Removed by vendor...
CVE-2017-5041: Improper Input Validation
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
[SECURITY] Fedora 25 Update: backintime-1.1.20-1.fc25
Back In Time is a simple backup system for Linux inspired from flyback project and TimeVault. The backup is done by taking snapshots of a specified set of directories...