5663 matches found
Apereo Webproxy Portlet Information Disclosure Vulnerability
Apereo Central Authentication Service CAS Server is a Jasig project under the Apereo Foundation that provides a trusted way for authenticated users to access applications. An information disclosure vulnerability exists in Apereo Webproxy Portlet versions prior to 2.2.2. An attacker could exploit...
DDoS Attack Takes Down Central Heating System Amidst Winter In Finland
Just Imaging — What if, you enter into your home from a chilling weather outside, and the heating system fails to work because of a cyber attack, leaving you in the sense of panic? The same happened late last month when an attack knocks heating system offline in Finland. Last week, a Distributed...
ManageEngine Desktop Central < 9.0.142 FileUploadServlet connectionId Vulnerability
ManageEngine Desktop Central 9 suffers from a vulnerability that allows a remote attacker to upload a malicious file, and execute it under the context of SYSTEM. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Cisco UCS Central Software Web UI Detection
Binary data ciscoucscentralwebuidetect.nbin...
Cisco UCS Central Software < 1.3(1c) HTTP Request Handling RCE
The version of Cisco Unified Computing System UCS Central Software running on the remote host is prior to 1.31c. It is, therefore, affected by a flaw in its web framework due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially craft...
Samsung Security Manager Denial of Service Vulnerability
Samsung Security Manager SSM is a set of South Korea's Samsung Samsung company's video equipment, the central management platform, which supports site group management, display the list of registered devices, through the mouse drag and drop or double-click operation to achieve the specified video...
Remote Code Execution Vulnerability in Samsung Security Manager
Samsung Security Manager SSM is a set of South Korea's Samsung Samsung company's video equipment, the central management platform, which supports site group management, display the list of registered devices, through the mouse drag and drop or double-click operation to achieve the specified video...
central.1111.com.tw XSS vulnerability
Vulnerable URL: http://central.1111.com.tw/14sp/highsalary/index.asp?agent=2008centralhighsalarymain2603" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...
central.espresso.co.uk Open Redirect vulnerability
Vulnerable URL: http://central.espresso.co.uk/redirect.pl?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
The vulnerability of the SAP NetWeaver file server allows a malicious attacker to gain unauthorized access to the SUP CUA subsystem.
The SAP NetWeaver application contains an error that allows a malicious individual to remotely gain access to the SAP CUA child system and read any tables from the central SAP CUA system...
DEBIAN-CVE-2016-5703
SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...
UBUNTU-CVE-2016-5703
SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...
CVE-2016-5703
SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...
CVE-2016-5703
SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...
Multiple XSS vulnerabilities
PMASA-2016-21 Announcement-ID: PMASA-2016-21 Date: 2016-06-23 Summary Multiple XSS vulnerabilities Description An XSS vulnerability was discovered on the user privileges page. An XSS vulnerability was discovered in the error console. An XSS vulnerability was discovered in the central columns...
The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.
The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...
Drupal CAS Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.CAS is one of the modules of the Java-based single sign-on solution. An information disclosure vulnerability exists in the Drupal CAS module in versions 7.x-1.5 prior to 7.x-1.x, which...
Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities
Binary data 9324.prm...