RHEL 8 : osinfo-db and libosinfo (RHSA-2019:3387)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3387 advisory. The osinfo-db package contains a database that provides information about operating systems and hypervisor platforms to facilitate the automated...

Low: Red Hat Security Advisory: osinfo-db and libosinfo security and bug fix update

An update for osinfo-db, osinfo-db-tools, libosinfo, and gnome-boxes is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

Design/Logic Flaw

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

CVE-2013-4374

CVE-2013-4374 describes an insecure temporary file storage vulnerability in the RHQ MongoDB Drift Server up to 2013-09-25, triggered when unpacking zipped files. The flaw causes unpacked files to land in a world-writable directory, which could permit local attackers to modify/tamper with files an...

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

PT-2019-6946

Name of the Vulnerable Software and Affected Versions RHQ Mongo DB Drift Server versions prior to 2013-09-25 Description A temporary file vulnerability exists when unpacking zipped files, potentially allowing for insecurity. Recommendations For versions prior to 2013-09-25, at the moment, there i...

CVE-2013-4374: Exposure of Resource to Wrong Sphere

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow (SEH)

Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow SEH Google Dork: N/A Date: 2019-10-30 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage:https://www.alloksoft.com/ Software Link: https://www.alloksoft.com/wmv.htm Version: v4.6.1217 Tested on: Windows XP SP3 CVE : N/A...

Part-DB 0.4 - Authentication Bypass

Part-DB 0.4 - Authentication Bypass Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription:...

Part-DB 0.4 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications...

Part-DB 0.4 Authentication Bypass

Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription: Easy authentication bypass...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270

Zend Framework versions affected: <2.2.10 and with a potential SQL injection in the PostgreSQL Zend\Db adapter. Root cause: improper handling/validation in the Zend\Db adapter leading to injectable SQL when interacting with PostgreSQL. Impact: potential disclosure or modification of data via ...

Oracle Siebel Core - DB Deployment and Configuration CVE-2019-2965 Remote Security Vulnerability

Description Oracle Siebel Core - DB Deployment and Configuration is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Install - Configuration' component is affected. This vulnerability affects the following supported versions: 19.8 and pri...

PT-2019-3686

Name of the Vulnerable Software and Affected Versions Siebel Core - DB Deployment and Configuration versions prior to 19.8 Description The issue is related to inadequate access control in the Siebel Core - DB Deployment and Configuration component of Oracle Siebel CRM. This can be exploited by a...

Express Invoice 7.12 - (Customer) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting Exploit Author: Debashis Pal Vendor Homepage: https://www.nchsoftware.com/ Source: https://www.nchsoftware.com/invoice/index.html Version: Express Invoice v7.12 C...

Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting

Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting Exploit Author: Debashis Pal Date: 2019-10-13 Vendor Homepage: https://www.nchsoftware.com/ Source: https://www.nchsoftware.com/invoice/index.html Version: Express Invoice v7.12 CVE : N/A Tested on: Windows 7 SP132bi...

PT-2019-7447

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct...