4000 matches found
phpMyAdmin 4.4.x < 4.4.15.3 / 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-6, PMASA-2016-7)
Binary data 9116.prm...
The vulnerability of Microsoft SharePoint Foundation software allows a hacker to inject arbitrary Web or HTML code.
The vulnerability of Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially created request...
IBM WebSphere Commerce Information Disclosure Vulnerability (CNVD-2016-01374)
IBM WebSphere Commerce is a suite of e-business solutions. A security vulnerability exists in IBM WebSphere Commerce. An attacker could exploit the vulnerability by submitting a special request to obtain sensitive information...
Squid Denial of Service Vulnerability (CNVD-2016-01384)
Squid is a suite of proxy server and web caching server software. A security vulnerability exists in Squid that could be exploited by remote attackers to submit a special request that could crash an application and cause a denial of service...
phpMyAdmin 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-8, PMASA-2016-9)
According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.5.x prior to 4.5.4. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in multiple scripts that allows a remote attacker, via ...
CVE-2016-2044
libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
Design/Logic Flaw
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
UBUNTU-CVE-2016-2044
libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
CVE-2016-2042
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...
CVE-2016-2038
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
CVE-2016-2042
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...
Apache Multiviews Arbitrary Directory Listing
The Apache web server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by sending a crafted request, to display a listing of a remote directory, even if a valid index file exists in the directory. C Tenable...
CVE-2016-0039
Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
PHP FPM 'fpm_log.c' Buffer Overflow Vulnerability
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A buffer overflow vulnerability in PHP FPM 'fpmlog.c' allows remote attackers to exploit the vulnerability to submit a special request to crash the application...
NTP Denial of Service Vulnerability (CNVD-2016-00895)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
Apache Camel Remote Code Execution Vulnerability (CNVD-2014-01444)
Apache Camel is a set of rule-based routing and mediation engines. A security vulnerability exists in Apache Camel that allows remote attackers to submit a special request to execute arbitrary code...
NTP Denial of Service Vulnerability (CNVD-2016-00897)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that allows a remote attacker to submit a special request for a denial-of-service attack...
NTP Denial of Service Vulnerability (CNVD-2016-00896)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...