13960 matches found
DependencyCheck v3.3.1 - A Software Composition Analysis Utility That Detects Publicly Disclosed Vulnerabilities In Application Dependencies
Dependency-Check is a Software Composition Analysis SCA tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generat...
CentOS 6 : openslp (CESA-2018:2308)
An update for openslp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Horizon 6, 7, and Horizon Client for Windows updates address an out-of-bounds read vulnerability
Out-of-bounds read vulnerability in the Message Framework library Horizon 6, 7, Horizon Agent, and Horizon Client for Windows contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from ...
PYSEC-2018-2
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect...
DEBIAN-CVE-2018-14574
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect...
Rincewind Cross-Site Scripting Vulnerability
Rincewind is a content management system CMS. A cross-site scripting vulnerability exists in Rincewind version 0.1. A remote attacker can inject arbitrary web script or HTML by sending a p=account request to the index.php and commonPages.php files...
PT-2018-2304 · Django Software Foundation +2 · Django +2
Name of the Vulnerable Software and Affected Versions: Django versions 1.11.x through 1.11.14 Django versions 2.0.x through 2.0.7 Description: The issue is related to an Open Redirect in the django.middleware.common.CommonMiddleware module of the Django framework. This occurs due to incorrect...
CentOS 7 : openslp (CESA-2018:2240)
An update for openslp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Medium: glibc
Issue Overview: stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary...
Microsoft Windows - dnslint.exe Drive-By Download
Microsoft Windows - dnslint.exe Drive-By Download + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DNSLINT.EXE-FORCED-DRIVE-BY-DOWNLOAD.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor...
Barracuda Cloud Control 7.1.1.003 Cross Site Scripting
Document Title: =============== Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...
XML External Entity (XXE)
phpoffice/common is vulnerable to XML external entity XXE attacks. The vulnerability exists due to the insecure defaults where external entities were allowed, making XXE attacks possible...
CVE-2018-14065
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
CVE-2018-14065
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
CVE-2018-14065
PHPOffice Common contains a XXE vulnerability in XMLReader.php, affecting versions before 0.2.9. Root cause: improper handling of XML external entities. Impact is described as XXE exposure in related advisories. Remediation: upgrade to PHPOffice Common 0.2.9 (see releases tag 0.2.9) to fix the is...
CVE-2018-14065
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
Description of the security update for SharePoint Server 2016: July 10, 2018
None None...
Description of the Security Only update for .NET Framework 3.5 for Windows 8.1 and Server 2012 R2 (KB 4338613)
Description of the Security Only update for .NET Framework 3.5 for Windows 8.1 and Server 2012 R2 KB 4338613 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists...