8903 matches found
CVE-2016-7884
Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks...
CVE-2016-7883
Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...
CVE-2016-7884
Adobe Experience Manager (AEM) versions 6.1 and earlier are affected by an input validation issue in the DAM create assets flow that could enable cross-site scripting. The problem is described in the CVE entry as an input validation flaw leading to XSS. The connected documents confirm the affecte...
PT-2016-7413
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager version 6.2 Description The issue is related to an input validation problem in the create Launch wizard, which could be exploited for cross-site scripting attacks. Recommendations For Adobe Experience Manager version...
PT-2016-7414
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 and earlier Description The issue is related to an input validation problem in the DAM create assets, which could be exploited for cross-site scripting attacks. Recommendations For Adobe Experience Manager...
CVE-2016-7883: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...
MySQL 5.7.x < 5.7.17 Multiple Vulnerabilities (January 2017 CPU) (July 2017 CPU)
The version of MySQL running on the remote host is 5.7.x prior to 5.7.17. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to cause a denial of service condition...
MySQL 5.5.x < 5.5.54 Multiple Vulnerabilities (January 2017 CPU)
The version of MySQL running on the remote host is 5.5.x prior to 5.5.54. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Optimizer subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. CVE-2017-3238 - An...
MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities (January 2017 CPU)
The version of MySQL running on the remote host is 5.6.x prior to 5.6.35. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to cause a denial of service condition...
ug.kassir.ru XSS vulnerability
Open Bug Bounty ID: OBB-197632 Description| Value ---|--- Affected Website:| ug.kassir.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
DEBIAN-CVE-2016-7994
Memory leak in the virtiogpuresourcecreate2d function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of VIRTIOGPUCMDRESOURCECREATE2D commands...
ALPINE-CVE-2016-9102
Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreate messages with the same fid number...
Bluemix Container Authorization Controls
Date : 09/12/2016 Author : Oscar Martinez Tested on:cf version 6.22.1+6b7af9c-2016-09-24 / Docker version 1.12.3, build 6b644ec / API endpoint: https://api.ng.bluemix.net API version: 2.54.0 API endpoint: https://api.ng.bluemix.net API version: 2.54.0 Vendor : IBM Software : bluemix...
Fedora 23 : phpMyAdmin (2016-7fc142da66)
phpMyAdmin 4.6.5.1 2016-11-26 =============================== A patch-level release fixing two small issues : - an issue affecting a small number of users using $cfg'Servers'$i'hidedb' or $cfg'Servers'$i'onlydb'. - an issue affecting the create table dialog where the partition selection tool was...
Lepton Cross-Site Forgery Vulnerability
Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from a cross-site forgery vulnerability that can be exploited by attackers to delete, create, or rename folders and files...
Create an AWS IAM User
This module will attempt to create an AWS Amazon Web Services IAM Identity and Access Management user with Admin privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/aws/client'...
LEPTON 2.2.2 - SQL Injection
LEPTON 2.2.2 - SQL Injection Security Advisory - Curesec Research Team 1. Introduction Affected Product: LEPTON 2.2.2 stable Fixed in: 2.3.0 Fixed Version Link: http://www.lepton-cms.org/posts/ important-lepton-2.3.0-101.php Vendor Website: http://www.lepton-cms.org/ Vulnerability Type: SQL...
Atutor Cross-Site Request Forgery Vulnerability
ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. A cross-site request forgery vulnerability exists in the /createcourse.php page in ATutor version 2.2.2,...
CVE-2016-8870
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...
PT-2016-7601
Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.6.4 Description The issue concerns the register method in the UsersModelRegistration class, which fails to check the Allow User Registration configuration setting when registration has been disabled. This allows...