2426 matches found
Adobe ColdFusion arbitrary command execution flaws vulnerability 0day(CVE–2017–11283, CVE–2017–11284)early warning-vulnerability warning-the black bar safety net
Adobe ColdFusion in 2017 9 November 12 released a network security update in refer to the previous version, there is a serious deserialization flaws vulnerability bug（CVE-2017-11283, CVE-2017-11284, and may incur long-distance code to fulfill. When applying the Flex integration-do on Remote Adobe...
PT-2017-11726
Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to the lack of validation of attributes ...
PT-2017-13510
Name of the Vulnerable Software and Affected Versions Crony Cronjob Manager plugin versions prior to 0.4.7 Description The issue concerns a CSRF vulnerability via the name parameter in an "action=manage&do=create" operation. This can be exploited to insert XSS sequences. Recommendations For...
CVE-2017-14530: Cross-Site Request Forgery (CSRF)
WPAdminUI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=manage&do=create operation, as demonstrated by inserting XSS sequences...
PT-2017-3860
Name of the Vulnerable Software and Affected Versions PostgreSQL versions 10.x prior to 10.1 PostgreSQL versions 9.6.x prior to 9.6.6 PostgreSQL versions 9.5.x prior to 9.5.10 Description The issue is related to the implementation of the INSERT ... ON CONFLICT DO UPDATE command in PostgreSQL, whi...
PT-2017-13311
Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions prior to 3.0.4 Description The issue is related to an off-by-one error in the mboxlist do find function, which can cause the use of uninitialized memory. This might allow remote attackers to obtain sensitive information or...
CVE-2017-5716
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12865. Reason: This candidate is a reservation duplicate of CVE-2017-12865. Notes: All CVE users should reference CVE-2017-12865 instead of this candidate. All references and descriptions in this candidate have been removed t...
FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (473b6a9e-8493-11e7-b24b-6cf0497db129)
Drupal Security Team : CVE-2017-6923: Views - Access Bypass - Moderately Critical CVE-2017-6924: REST API can bypass comment approval - Access Bypass - Moderately Critica CVE-2017-6925: Entity access bypass for entities that do not have UUIDs or have protected revisions - Access Bypass - Critical...
CVE-2017-11545
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
UBUNTU-CVE-2017-7473
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none...
PT-2017-4178
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.31 PHP versions 7.x prior to 7.0.21 PHP versions 7.1.x prior to 7.1.7 Description A stack-based buffer overflow in the zend ini do op function could cause a denial of service or potentially allow executing code. This...
Description of the security update for Outlook 2013: June 13, 2017
Description of the security update for Outlook 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
PT-2017-6722
Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 5.0.1 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by manipulating the assets array parameter in the /netscan/do scan.php API endpoint. Recommendatio...
CVE-2016-7493
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7631
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7484
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7495
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7365
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...