6725 matches found
nogaro-tourisme.fr XSS vulnerability
Vulnerable URL: http://www.nogaro-tourisme.fr/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6256690 VIP website status:| No Check nogaro-tourisme.fr SSL connection:| Grade:...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.
The vulnerability of XFA PDF viewer programs such as Adobe Reader and Document Cloud, as well as Adobe Acrobat and Document Cloud’s PDF editing programs, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code related ...
Jtag Calendar 6.2.4
JTag Calendar versions 6.2.4 and previous Resolution: update to 6.2.5 Developer states: Fixed security issue in search functionality Update notice: https://joomlatag.com/premium-joomla-extensions/jtag-calendar-detail.html...
CVE-2016-5902
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
[SECURITY] Fedora 24 Update: wavpack-5.1.0-1.fc24
WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...
Design/Logic Flaw
A vulnerability in the implementation of Common Industrial Protocol CIP functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to a system memory leak. More Information: CSCvc54788. Known...
Cross site scripting
IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
bulls.de XSS vulnerability
Vulnerable URL: https://www.bulls.de/suchergebnis.html?query=1zqjyo...
expert-technomarkt.de XSS vulnerability
Vulnerable URL: https://www.expert-technomarkt.de/index.php?stoken=sid=〈=0=search=1zqjvh%27%22...
br.msi.com XSS vulnerability
Vulnerable URL: https://br.msi.com/search/...
pl.msi.com XSS vulnerability
Vulnerable URL: https://pl.msi.com/search/...
es.msi.com XSS vulnerability
Vulnerable URL: https://es.msi.com/search/...
koh-i-noor.cz XSS vulnerability
Vulnerable URL: http://www.koh-i-noor.cz/en/search?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...
CVE-2017-3299
CVE-2017-3299 describes a vulnerability in the Oracle PeopleSoft Enterprise PeopleTools (subcomponent: PIA Search Functionality). Affected versions are 8.54 and 8.55. The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Success...
CVE-2016-9054
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function assindexsimatchlistbysetbinid resulting in remote code execution. An attacker can...
CVE-2016-9052
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function assindexsimatchbyiname resulting in remote code execution. An attacker can simply...
PT-2017-2401 · Aerospike · Aerospike Database Server
Name of the Vulnerable Software and Affected Versions: Aerospike Database Server version 3.10.0.3 Description: A stack-based buffer overflow issue exists in the querying functionality. This can be triggered by a specially crafted packet, causing a buffer overflow in the as sindex simatch list by...
Netscaler round robin algorithm
How to troubleshoot round robin method to confirm functionality?...