WordPress WP Cost Estimation plugin < 9.644 - Arbitrary File Upload and Delete vulnerability

Arbitrary File Upload and Delete vulnerability found by Wordfence in WordPress WP Cost Estimation versions 9.644. Solution All versions older than 9.644 vulnerable and you should update to the latest available version at least to 9.644...

WP Cost Estimation < 9.644 - Arbitrary File Upload and Delete

The WPEstimationForm WordPress plugin was affected by an Arbitrary File Upload and Delete security vulnerability...

WordPress WP Cost Estimation plugin < 9.660 - Upload Directory Traversal vulnerability

Upload Directory Traversal vulnerability found by Wordfence in WordPress WP Cost Estimation plugin versions 9.660. Solution All versions older than version 9.660 are vulnerable, update to the latest version at least 9.660...

Widespread Malvertising Campaign Hijacks 300 Million Sessions

A massive malvertising campaign targeting iOS devices hijacked a whopping 300 million browser sessions in just 48 hours. Researchers at Confiant recorded the campaign Nov. 12, and said that the threat actor behind the campaign is still active to this day. A malicious landing page According to...

GraphicsMagick -- SVG/Rendering vulnerability

GraphicsMagick News: Fix heap write overflow of PrimitiveInfo and PointInfo arrays. This is another manefestation of CVE-2016-2317, which should finally be fixed correctly due to active detection/correction of pending overflow rather than using estimation...

Microsoft Windows: Turn on Mapper I/O (LLTDIO) driver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmapperiodriver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn on Mapper I/O LLTDIO driver Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

estimation-paris.com XSS vulnerability

Open Bug Bounty ID: OBB-588026 Description| Value ---|--- Affected Website:| estimation-paris.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EulerOS 2.0 SP2 : posrgresql (EulerOS-SA-2017-1216)

According to the versions of the posrgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibl...

EulerOS 2.0 SP1 : posrgresql (EulerOS-SA-2017-1215)

According to the versions of the posrgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibl...

Scientific Linux Security Update : postgresql on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: postgresql 9.2.21. Security Fixes : - It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibly leaking information. A non-administrative...

netvendeur.com XSS vulnerability

Vulnerable URL: https://www.netvendeur.com/estimation-immobiliere/?typebien=maisonbien=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Epiece=8 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 393513 V...

Do’s and Don’ts of Capacity Estimation for Database Monitoring Tools

When deploying a database monitoring tool, one of the first things you need to do is to determine the size of your deployment. So, where do you start? In a previous blog post I described the various aspects that can have an impact on the capacity requirements needed for a database monitoring...

Moderate: Red Hat Security Advisory: rh-postgresql95-postgresql security update

An update for rh-postgresql95-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Amazon Linux AMI : postgresql92 (ALAS-2017-838)

Selectivity estimators bypass SELECT privilege checks It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tabl...

Medium: postgresql93, postgresql94, postgresql95

Issue Overview: Selectivity estimators bypass SELECT privilege checks It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some...

PostgreSQL Multiple Information Disclosure Vulnerabilities (May 2017) - Linux

PostgreSQL is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...

ALPINE-CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...

CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...

UBUNTU-CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...