7254 matches found
FreeBSD -- File description reference count leak
Problem Description: If a process attempts to transmit rights over a UNIX-domain socket and an error causes the attempt to fail, references acquired on the rights are not released and are leaked. This bug can be used to cause the reference counter to wrap around and free the corresponding file...
CVE-2019-14230
An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the setcount ajax nopriv handler due to there being no sanitization prior to use in a SQL query in saveQuestionVote. This allows an unauthenticated/unprivileged use...
PT-2019-13549
Name of the Vulnerable Software and Affected Versions Viral Quiz Maker - OnionBuzz plugin versions prior to 1.2.7 Description An issue in the plugin allows an unauthenticated user to perform a SQL injection attack due to the lack of sanitization of the id parameter in the "set count" AJAX handler...
Security fix for the ALT Linux 8 package samba-DC version 4.9.10-alt1
July 16, 2019 Evgeny Sinelnikov 4.9.10-alt1 - Update to latest summer release of samba-4.9 backported to p8 - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum + CVE-2018-16852 NULL...
SUSE-SU-2019:1768-1 Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-9497 fixes one issue. The following security issue was fixed: - CVE-2019-11487: The Linux kernel allowed page-refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c,...
Security fix for the ALT Linux 8 package samba version 4.9.9-alt1
June 26, 2019 Evgeny Sinelnikov 4.9.9-alt1 - Update to summer security release of samba-4.9 backported to p8 - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum + CVE-2018-16852 NULL...
WordPress Count per Day Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Count per Day plugin is a plugin that counts the number of visitors to a web page. A cross-site scripting vulnerability exists in...
WordPress Count per Day Plugin < 3.2.6 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2013-7472
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...
CVE-2013-7472
The CVE-2013-7472 issue affects the WordPress Count per Day plugin prior to version 3.2.6, where an XSS vulnerability can be triggered via the daytoshow parameter in wp-admin/?page=cpd_metaboxes. Impact details in connected records indicate cross-site scripting without authentication and with use...
PT-2019-7021
Name of the Vulnerable Software and Affected Versions Count per Day plugin versions prior to 3.2.6 Description The issue allows for XSS exploitation via the daytoshow parameter in the /wp-admin/?page=cpd metaboxes API endpoint. Recommendations For versions prior to 3.2.6, update to version 3.2.6 ...
CVE-2013-7472: Improper Neutralization of Input During Web Page Generation
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...
PYSEC-2019-163
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in newaubiofilterbank via invalid nfilters...
CVE-2019-5307
Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 and P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on th...
PT-2019-17570
Name of the Vulnerable Software and Affected Versions Huawei P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 Huawei P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 Description The issue is related to a message replay vulnerability in some Huawei 4G LTE devices...
EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2019-1635)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the...
Security Advisory - Some Huawei 4G LTE devices are exposed to a message replay vulnerability
Some Huawei 4G LTE devices are exposed to a message replay vulnerability. or the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number SN, specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI...
EulerOS Virtualization 3.0.1.0 : cups (EulerOS-SA-2019-1432)
According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A cross-site scripting flaw was found in the cups web templating engine. An attacker could use this flaw to bypass the default...
