13608 matches found
CVE-2018-15172
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...
DependencyCheck v3.3.1 - A Software Composition Analysis Utility That Detects Publicly Disclosed Vulnerabilities In Application Dependencies
Dependency-Check is a Software Composition Analysis SCA tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generat...
CentOS 6 : openslp (CESA-2018:2308)
An update for openslp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Horizon 6, 7, and Horizon Client for Windows updates address an out-of-bounds read vulnerability
Out-of-bounds read vulnerability in the Message Framework library Horizon 6, 7, Horizon Agent, and Horizon Client for Windows contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from ...
PYSEC-2018-2
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect...
DEBIAN-CVE-2018-14574
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect...
Rincewind Cross-Site Scripting Vulnerability
Rincewind is a content management system CMS. A cross-site scripting vulnerability exists in Rincewind version 0.1. A remote attacker can inject arbitrary web script or HTML by sending a p=account request to the index.php and commonPages.php files...
PT-2018-2304 · Django Software Foundation +2 · Django +2
Name of the Vulnerable Software and Affected Versions: Django versions 1.11.x through 1.11.14 Django versions 2.0.x through 2.0.7 Description: The issue is related to an Open Redirect in the django.middleware.common.CommonMiddleware module of the Django framework. This occurs due to incorrect...
CentOS 7 : openslp (CESA-2018:2240)
An update for openslp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Medium: glibc
Issue Overview: stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary...
Microsoft Windows - dnslint.exe Drive-By Download
Microsoft Windows - dnslint.exe Drive-By Download + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DNSLINT.EXE-FORCED-DRIVE-BY-DOWNLOAD.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor...
Barracuda Cloud Control 7.1.1.003 Cross Site Scripting
Document Title: =============== Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...
XML External Entity (XXE)
phpoffice/common is vulnerable to XML external entity XXE attacks. The vulnerability exists due to the insecure defaults where external entities were allowed, making XXE attacks possible...
CVE-2018-14065
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
CVE-2018-14065
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
CVE-2018-14065
PHPOffice Common contains a XXE vulnerability in XMLReader.php, affecting versions before 0.2.9. Root cause: improper handling of XML external entities. Impact is described as XXE exposure in related advisories. Remediation: upgrade to PHPOffice Common 0.2.9 (see releases tag 0.2.9) to fix the is...
