CVE-2015-5341

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...

ManageEngine Network Configuration Management Build 11000 CSRF

Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...

CVE-2015-7084

creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39366 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39357...

OracleVM 2.2 : xen (OVMSA-2015-0151)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix-up bad changelog dates - guard against undue super page PTE creation XSA-148 Jan Beulich %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

Updated python-django packages fix security vulnerability

If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format CVE-2015-8213...

CVE-2014-8155

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is 1 not yet valid or 2 no longer valid...

Design/Logic Flaw

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is 1 not yet valid or 2 no longer valid...

CVE-2014-8155

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is 1 not yet valid or 2 no longer valid...

Amazon Linux AMI : gnutls (ALAS-2015-575)

It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as valid when its issuing CA is already expired. CVE-2014-8155 It was found that GnuTLS did not verify whether a hashing...

w3schools.com XSS vulnerability

Vulnerable URL: http://www.w3schools.com/css/tryitview.asp?x=0.3865461222300134 Details: Description| Value ---|--- Patched:| Yes, at 27.01.2017 Latest check for patch:| 27.01.2017 08:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 206 Google Pagerank| 7 VIP...

gnutls: gnutls does not perform date/time checks on CA certificates

It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as valid when its issuing CA is already expired...

Cryptowall 3.0 Infections Spike from Angler EK, Malicious Spam

Since the Angler Exploit Kit began in late May spreading Cryptowall 3.0 ransomware, traffic containing the malware has continued to grow, putting more potential victims in harm’s way. Today, the SANS Internet Storm Center reported that Cryptowall 3.0 infections are emanating from not only the...

CVE-2015-3043

creationtimestamp| type| source ---|---|--- 2015-04-20 06:14:06+00:00| seen| MISP/553498df-ff70-43d0-b067-4cf3950d210b 2015-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37536 2015-10-15 22:07:38+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2017-04-26...

PT-2015-4018 · Gnu +4 · Gnutls +4

Name of the Vulnerable Software and Affected Versions: GnuTLS versions prior to 2.9.10 Description: The issue allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is either not yet valid or no longer valid, due to the failure to verify the activati...

CVE-2015-0002

creationtimestamp| type| source ---|---|--- 2015-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35661 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntapphelpcachecontrol.rb 2025-02-06 03:13:42+00:00...

php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash...

CVE-2014-6446

creationtimestamp| type| source ---|---|--- 2014-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34925 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162 2018-05-29 15:50:33+00:00| seen|...

SSL/TLS Certificate Validity Dates Detection

Binary data 7126.pasl...

CVE-2014-3913

creationtimestamp| type| source ---|---|--- 2014-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33817 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ericomaccessnowbof.rb 2025-02-06 03:13:41+00:00|...