1607 matches found
CVE-2017-8295
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to...
EulerOS 2.0 SP1 : squid (EulerOS-SA-2016-1056)
According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of...
Unitrends Enterprise Backup api/includes/users.php page password change vulnerability
Unitrends Enterprise Backup is backup software that incorporates cloud continuity services to ensure the recovery of your virtual, physical and cloud data, systems and applications. A password change vulnerability exists in the api/includes/users.php page of Unitrends Enterprise Backup, which can...
CVE-2017-7283: Improper Input Validation
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
CVE-2017-7282: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access...
PT-2017-17633
Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.1 Description An issue allows an authenticated attacker to read any file in the filesystem that the web server has access to. This is achieved through the "downloadFile" function in...
PT-2017-17634
Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.2 Description The issue allows an authenticated user to execute arbitrary OS commands by sending a specially crafted filename to the "/api/restore/download-files" endpoint. This is related to t...
Remote code execution
An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable...
CVE-2017-7284: Improper Authentication
An attacker that has hijacked a Unitrends Enterprise Backup before 9.1.2 web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover...
CVE-2017-7280: Improper Input Validation
An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable...
PT-2017-17631
Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.0.0 Description An issue was discovered in the api/includes/systems.php file, where user input is not properly filtered before being sent to a popen function, allowing for remote code execution b...
PT-2017-17635
Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.2 Description The issue allows an attacker who has hijacked a Unitrends Enterprise Backup web server session to change the password of the logged-in account without knowing the current password...
WordPress BuddyPress Docs Unauthorized Operation Vulnerability
WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports the hosting of personal blog sites on servers running PHP and MySQL.BuddyPress Docs is one of the plugins for adding collaborative workspaces. A security vulnerability...
CVE-2017-6954
An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions...
PT-2017-17421
Name of the Vulnerable Software and Affected Versions BuddyPress Docs plugin versions prior to 1.9.3 Description The issue allows authenticated users to edit documents of other users without proper permissions. This is due to a problem in the includes/component.php file of the BuddyPress Docs...
CVE-2016-0770: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable...
CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
CVE-2017-6815
In WordPress before 4.7.3 wp-includes/pluggable.php, control characters can trick redirect URL validation...
CVE-2017-6814
In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...