181 matches found
openSUSE Security Update : libapr-util1 (openSUSE-2017-1370)
This update for libapr-util1 fixes the following issues : Security issue fixed : - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SUSE-SU-2017:3278-1 Security update for libapr-util1
This update for libapr-util1 fixes the following issues: Security issue fixed: - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990...
Telegram Messenger for iOS and Android Information Disclosure Vulnerability
Telegram Messenger for iOS and Android is a suite of mobile messaging tools based on the iOS and Android platforms. An information disclosure vulnerability exists in Telegram Messenger version 2.6 for iOS and Telegram Messenger version 1.8.2 for Android. The vulnerability can be exploited to obta...
IdeaCMS v2.0.7 suffers from information leakage vulnerability
IdeaCMS is based on Asp+Access/Mssql environment developed by the day side of the network technology limited company of rapid station-building system. IdeaCMS v2.0.7 exists information leakage vulnerability. An attacker can exploit the vulnerability to download database files and obtain sensitive...
Microsoft Windows JET Database Engine Remote Code Execution Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft.JET Database Engine is one of the database engines. A remote code execution vulnerability exists in JET Database Engine in Microsoft Windows. A remote attacker can exploit this vulnerability to execute code on an affected...
Access restriction bypass to delete DBM files in Cybozu Dezie
Overview Cybozu Dezie provided by Cybozu,Inc. contains an access restriction bypass vulnerability to delete DBM Cybozu Dezie proprietary format files. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under th...
Access restriction bypass to download DBM files in Cybozu Dezie
Overview Cybozu Dezie provided by Cybozu,Inc. contains an access restriction bypass vulnerability to download DBM Cybozu Dezie proprietary format files. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under...
PHPCMS V9 Trojan Bypass Configuration Vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS V9 Trojan horse checking at the existence of bypass configuration vulnerability, allowing attackers to exploit the...
Pulp Information Disclosure Vulnerability (CNVD-2016-05111)
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A local information disclosure vulnerability exists in Pulp that stems from the program creating certificate files and database files that are stored...
SQL Injection Vulnerability in Jinhe IOAS Standard Office System for SMBs
Beijing Jinhe Network Co., Ltd. is an enterprise that provides informationization solutions and collaborative management software, and IOAS Standard Office System for Small and Medium-sized Enterprises is one of the products of Beijing Jinhe Network Co. SQL injection vulnerability exists in IOAS...
XLineSoft ASPRunner 1.0/2.x [TABLE-NAME]_search.asp Typeen Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...
XLineSoft ASPRunner 1.0/2.x [TABLE]_list.asp SearchFor Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...
XLineSoft ASPRunner 1.0/2.x export.asp SQL Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...
[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18
Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...
ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal
!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Security Manager Plus 0x90.nl Software link :...
Anonymous Antisec leaks Zimbabwe, Australia and Brazil governments data dumps
Anonymous Antisec leaks Zimbabwe, Australia and Brazil governments data dumps Anonymous Hackers have published a mass of data including passwords that appears to have been stolen from the governments of Brazil, Zimbabwe, Australia and the Caribbean island Anguilla. One of the files released via...
Directory traversal
Multiple directory traversal vulnerabilities in the a Local Storage and b Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involvi...
CVE-2010-1391
Multiple directory traversal vulnerabilities in the a Local Storage and b Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involvi...
CVE-2010-1391
Multiple directory traversal vulnerabilities in the a Local Storage and b Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database files via vectors involvi...
