3535 matches found
Google Analytics Counter Tracker <= 3.4.0 - Unauthenticated PHP Object Injection
The Google Analytics Counter Tracker WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...
ipregistry.dmrights.com XSS vulnerability
Vulnerable URL: http://ipregistry.dmrights.com/counter/index.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...
kernel: challenge ACK counter information disclosure.
It was found that the RFC 5961 challenge ACK rate limiting as implemented in the Linux kernel's networking subsystem allowed an off-path attacker to leak certain information about a given connection by creating congestion on the global challenge ACK rate limit counter and then measuring the chang...
SUSE SLES11 Security Update : libxml2 (SUSE-SU-2016:1604-1)
This update for libxml2 fixes the following security issues : - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c bsc963963, bsc965283, bsc981114. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings...
kernel: challenge ACK counter information disclosure.
It was found that the RFC 5961 challenge ACK rate limiting as implemented in the Linux kernel's networking subsystem allowed an off-path attacker to leak certain information about a given connection by creating congestion on the global challenge ACK rate limit counter and then measuring the chang...
kernel: challenge ACK counter information disclosure.
It was found that the RFC 5961 challenge ACK rate limiting as implemented in the Linux kernel's networking subsystem allowed an off-path attacker to leak certain information about a given connection by creating congestion on the global challenge ACK rate limit counter and then measuring the chang...
WordPress plugin analytics-counter cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in the WordPress plugin analytics-counter version 3.2.0 allows attackers...
AppArmor securityfs < 4.8 - aa_fs_seq_hash_show Reference Count Leak
Exploit for linux platform in category dos / poc / There's a reference count leak in aafsseqhashshow that can be used to overflow the reference counter and trigger a kernel use-after-free static int aafsseqhashshowstruct seqfile seq, void v struct aareplacedby r = seq-private; struct aaprofile...
Pedometer Step Counter - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Pedometer Step Counter published at the 'play' market has multiple vulnerabilities...
Moneybird: [Stored Cross-Site-Scripting] When search about Incoming ( Manual Jurnal )
Reporter found a XSS vulnerability in a JavaScript module in our application. We have implemented counter measures to prevent such vulnerabilities in the future...
WordPress Thank You Counter Button Plugin <= 1.8.2 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "paged". Solution Update plugin...
Drupal Google Analytics Counter Cross-Site Request Forgery Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Google Analytics Counter is one of the website traffic analysis modules. A cross-site request forgery vulnerability exists in Drupal Google Analytics Counter versions prior to 7.x-3.2,...
OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)
It was discovered that the GCM Galois/Counter Mode implementation in the JCE component in OpenJDK used a non-constant time comparison when comparing GCM authentication tags. A remote attacker could possibly use this flaw to determine the value of the authentication tag...
WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞
No description provided by source...
Oracle Linux 6 / 7 : libxml2 (ELSA-2016-1292)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1292 advisory. - Heap-based buffer overread in xmlNextChar CVE-2016-1762 - Bug 763071: Heap-buffer-overflow in xmlStrncat CVE-2016-1834 - Bug 757711:...
OracleVM 3.2 : curl (OVMSA-2016-0056)
The remote OracleVM system is missing necessary patches to address critical security updates : - fix heap-based buffer overflow in curleasyunescape CVE-2013-2174 - fix cookie tailmatching to prevent cross-domain leakage CVE-2013-1944 - introduce the --delegation option of curl 746849 - fix stack...
openSUSE Security Update : libxml2 (openSUSE-2016-733)
This update for libxml2 fixes the following security issues : - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c bsc963963, bsc965283, bsc981114. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings...
SUSE-SU-2016:1538-1 Security update for libxml2
This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c bsc963963, bsc965283, bsc981114. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings...
openSUSE Security Update : ntp (openSUSE-2016-649)
This update for ntp fixes the following issues : - Update to 4.2.8p7 boo977446 : - CVE-2016-1547, boo977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. - CVE-2016-1548, boo977461: Interleave-pivot - CVE-2016-1549, boo977451: Sybil vulnerability: ephemeral association attack. - CVE-2016-1550,...