Lucene search
+L

8591 matches found

Atlassian
Atlassian
•added 2014/06/06 7:21 a.m.•43 views

Cannot create page/s using "Create Page" Button

We are a large corporation currently in the process of rolling out a complete Atlassian Toolchain Jira, Confluence, Bamboo, Stash within the next 4 weeks. Unfortunately in Confluence, we cannot use the "Create Page" Button, as we get the following issue regardless of when this is done or by whom:...

SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2014/06/03 7:12 p.m.•243 views

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2014/05/30 12:00 a.m.•3 views

PT-2014-3188

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5, 9.7 before FP9a, 10.1 before FP3a, 10.5 before FP3a Description The issue allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE EXTERNAL ROUTINE authority in the Stored...

8.5CVSS0.02726EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/23 12:00 a.m.•9 views

CVE-2013-2713: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in usersmaint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request...

6.8CVSS5.9AI score0.01437EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2014/05/23 12:00 a.m.•4 views

PT-2014-2625

Name of the Vulnerable Software and Affected Versions KrisonAV CMS versions prior to 3.0.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request. Recommendations For versio...

6.8CVSS0.01437EPSS
SaveExploits5References7
Mend
Mend
•added 2014/05/20 2:00 p.m.•4 views

CVE-2013-4320

The File Abstraction Layer FAL in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL...

5.5CVSS0.00983EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/05/13 12:00 a.m.•5 views

PT-2014-2613

Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions prior to 1.8.5 Description A cross-site request forgery CSRF issue exists in the Admin web interface, allowing remote attackers to hijack the authentication of administrators for requests that create administrati...

6.8CVSS0.00974EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/13 12:00 a.m.•8 views

CVE-2013-2692: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users...

6.8CVSS5.9AI score0.00974EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2014/05/12 6:12 p.m.•100 views

Important: Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Updated cfme packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

6.5CVSS7.3AI score0.08245EPSS
SaveExploits7References13
Prion
Prion
•added 2014/05/12 2:55 p.m.•25 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requests that create categories via unspecified vecto...

6.8CVSS7.6AI score0.00599EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2014/05/08 2:00 p.m.•6 views

CVE-2014-0056

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command...

3.1CVSS0.01445EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/08 12:00 a.m.•5 views

CVE-2014-0056: Improper Authentication

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command...

2.1CVSS6AI score0.01445EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/05/01 12:00 a.m.•4 views

PT-2023-20430

Name of the Vulnerable Software and Affected Versions libcap affected versions not specified Description A vulnerability was found in the pthread create function in libcap. This issue may allow a malicious actor to cause real pthread create to return an error, which can exhaust the process memory...

7.8CVSS0.00579EPSS
SaveExploits2References55
Positive Technologies
Positive Technologies
•added 2014/04/19 12:00 a.m.•2 views

PT-2014-4396

Name of the Vulnerable Software and Affected Versions AndExplorer versions prior to 20140403 AndExplorerPro versions prior to 20140405 Description A directory traversal issue exists in the affected applications, allowing attackers to overwrite or create arbitrary files through unspecified vectors...

6.4CVSS0.01509EPSS
SaveExploits0References5
Hacker One
Hacker One
•added 2014/04/17 6:22 p.m.•23 views

Localize: XSS in Groups

Visit the following link after logging in: http://www.localize.io/pages/createproject/3D Add a new group with an XSS string as group name and you will see the XSS execting. String used: ? Thanks, Ben...

SaveExploits0
Prion
Prion
•added 2014/04/15 11:55 p.m.•25 views

Code injection

The LXC driver lxc/lxcdriver.c in libvirt 1.0.1 through 1.2.1 allows local users to 1 delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; 2 create arbitrary nodes mknod via the virDomainDeviceAttach API and a symlink attack on /dev in th...

5.8CVSS6.9AI score0.00577EPSS
SaveExploits0References12Affected Software2
Debian CVE
Debian CVE
•added 2014/04/15 6:00 p.m.•75 views

CVE-2013-6456

The LXC driver lxc/lxcdriver.c in libvirt 1.0.1 through 1.2.1 allows local users to 1 delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; 2 create arbitrary nodes mknod via the virDomainDeviceAttach API and a symlink attack on /dev in th...

5.8CVSS6.8AI score0.00577EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/11 12:00 a.m.•9 views

CVE-2014-1969: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename...

5.8CVSS6AI score0.01142EPSS
SaveExploits0References2
Mend
Mend
•added 2014/04/10 2:00 p.m.•3 views

CVE-2014-2583

Multiple directory traversal vulnerabilities in pamtimestamp.c in the pamtimestamp module for Linux-PAM aka pam 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. dot dot in the 1 PAMRUSER value to the getruser function or 2 PAMTTY value to the checktty...

6.3CVSS0.04105EPSS
SaveExploits2References11
Positive Technologies
Positive Technologies
•added 2014/04/10 12:00 a.m.•4 views

PT-2014-4793

Name of the Vulnerable Software and Affected Versions Linux-PAM version 1.1.8 Description The issue concerns multiple directory traversal vulnerabilities in the pam timestamp module. These vulnerabilities allow local users to create arbitrary files or possibly bypass authentication. This can be...

6.5CVSS0.04105EPSS
SaveExploits3References50
Rows per page
Query Builder