USN-2959-1 openssl vulnerabilities

Huzaifa Sidhpurwala, Hanno Böck, and David Benjamin discovered that OpenSSL incorrectly handled memory when decoding ASN.1 structures. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2108 Juraj...

Ecava IntegraXor HMI Privilege Bypass Vulnerability

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. The Ecava IntegraXor HMI fails to properly process specific elements of input, allowing remote attackers to exploit the vulnerability to bypass security restrictions...

USN-2925-1 bind9 vulnerabilities

It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2016-1285 It was discovered that Bind incorrectly parsed resource record signatures for DNAME...

iScripts EasyCreate 3.0 - Multiple Vulnerabilities

iScripts EasyCreate 3.0 Multiple Vulnerabilities Vendor Product Description - iScripts EasyCreate is a private label online website builder. This software allows you to start an online business by offering website building services to your customers. Equipped with drag and drop design...

markdown-it and NodeBB HTML Injection Vulnerabilities

markdown-it is a parser product. NodeBB is a forum system developed by the Design Create Play team and built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. An HTML injection vulnerability exists in markdown-it versions prior to 4.1.0 and NodeBB versions...

GoAutoDial CE 3.3 SQL Injection / Command Injection Exploit

GoAutoDial CE version 3.3 remote command execution and SQL injection vulnerabilities. Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection Date : 06/12/2015 Author : R-73eN Tested on : goautodial-32bit-ce-3.3-final Software : http://goautodial.org/ | | / | / | / \ | | | || ' | | /...

DSA-3370-1 freetype - security update

Bulletin has no description...

ZeusCart 4 信息泄漏漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 from urlparse import urljoin from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '11111 ' vul ID version = '1' author = 'Disorder' vulDate =...

Junos Space Network Management Platform SNMP Answer Forgery Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. Junos Space Network Management Platform fails to properly process inputs, allows SNMP answer spoofing, and allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used...

Wing FTP Server Admin /admin_event_list.html type Cross Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /admineventlist.html type parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

IBM Tivoli Storage Manager stack buffer overflow vulnerability (CNVD-2015-02431)

IBM Tivoli Storage Manager TSM is a backup and recovery management solution from IBM in the United States. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager. Due to the application failing to properly filter user-supplied input. Allowing an attacker to exploit the...

IBM DB2 Universal Database DAS Buffer Overflow Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A buffer overflow vulnerability exists in IBM DB2 that stems from the program's failure to perform...

openssl: PKCS7 NULL pointer dereference

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS7 inputs. An attacker able to make an application using OpenSSL verify, decrypt, or parse a specially crafted PKCS7 input could cause that application to crash. TLS/SSL clients and servers using OpenSSL were not affected ...

CentOS Update for kernel CESA-2015:0674 centos6

Check the version of kernel SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882129";...

Apache WSS4J Security Bypass Vulnerability

WSS4J is a Java implementation of the OASIS Web Services Security WS-Security specification framework. A security bypass vulnerability exists in Apache WSS4J due to the program failing to adequately process user-supplied input. An attacker could use this vulnerability to bypass certain security...

Ektron CMS XML External Entity Injection Vulnerability

Ektron CMS is a content management system. An injection vulnerability exists in the Ektron CMS XML external entity due to the application failing to properly filter user-supplied input before dynamically generating content. An attacker could exploit this vulnerability to execute arbitrary code...

Multiple Vulnerabilities in Fortinet FortiClient

Fortinet FortiClient is a unified standard security software agent for PCs and smartphones. Fortinet FortiClient has multiple security vulnerabilities due to the program failing to properly process user-supplied input. This vulnerability could be exploited by an attacker to bypass certain securit...

Drupal Ubercart Currency Conversion Module Open Redirect Vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal Ubercart Currency Conversion module due to the application failing to properly process user-supplied input. An attacker is allowed to exploit this vulnerability to...

Multiple Cross-Site Scripting Vulnerabilities in Saurus CMS

Saurus CMS is a content management system. Saurus CMS suffers from multiple cross-site scripting vulnerabilities due to the program failing to properly process user-supplied input. This allows attackers to exploit this vulnerability to steal cookie-based authentication credentials, execute...

Apache Qpid Security Bypass Vulnerability

Apache Qpid Open Source AMQP Messaging is a cross-platform enterprise communications solution that implements an advanced message queuing protocol . A security bypass vulnerability exists in Apache Qpid due to the program failing to adequately process user-supplied input. An attacker could use th...