639 matches found
Ansible: Compromised remote hosts can lead to running commands on the Ansible controller
An input validation vulnerability was found in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server...
Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02472)
Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the extensionsettings CGI /cgi-bin/extensionsettings component of the Dell SonicWall Secure Remote Access's web...
Ansible: Compromised remote hosts can lead to running commands on the Ansible controller
An input validation vulnerability was found in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server...
VoipNow 4.0.1 Script Insertion
Document Title: =============== VoipNow v4.0.1 - xajaxhandler Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1828 Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 182...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the http.cc function in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause a service failure—such as the appearance of an “Assertion failure” message and the termination of the...
The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.
The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...
Debian DLA-292-1 : libstruts1.2-java security update
The Validator in Apache Struts 1.1 and later contains a function to efficiently define rules for input validation across multiple pages during screen transitions. This function contains a vulnerability where input validation may be bypassed. When the Apache Struts 1 Validator is used, the web...
LEMON-S PHP Gazou BBS plus Input Validation Vulnerability
LEMON-S PHP Gazou BBS plus is a free PHP-based BBS system. A security vulnerability exists in LEMON-S PHP Gazou BBS plus, which allows remote attackers to exploit the vulnerability to upload arbitrary HTML files...
PhreeBooks Input Validation Vulnerability
PhreeBooks is a suite of open source Web-based enterprise resource planning ERP and accounting applications that provide vendor account information management, inventory management and tracking, checking and bank reconciliation, and more. An input validation vulnerability exists in PhreeBooks. An...
Zhone GPON 2520 Input Validation Vulnerability
Zhone GPON 2520 is a Zhone solution based on the ITU-TG.984.x standard for broadband passive optical integrated access. A security vulnerability exists in the Zhone GPON 2520. The vulnerability can be exploited by a remote attacker to cause a denial of service with the help of an extra-long strin...
FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient...
JiRos Link Manager 1.0 openlink.asp LinkID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...
SAP Business Connector 4.6/4.7 adapter-index.dsp url Variable Arbitrary Site Redirect
No description provided by source. source: http://www.securityfocus.com/bid/16671/info SAP Business Connector is susceptible to an input-validation vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input. This issue allows remote attackers to execute...
AnnonceScriptHP 2.0 admin/admin_config/Aide.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
UebiMiau <= 2.7.10 demo/pop3/error.php selected_theme Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24210/info Uebimiau is prone to multiple input-validation vulnerabilities, including cross-site scripting issues and an information-disclosure issue, because the application fails to properly sanitize user-supplied input...
3R Soft MailStudio 2000 2.0 Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the /.. string passed to a CGI, thereby compromising th...
Easy File Sharing Web Server 3.2 Full Path Request Arbitrary File Upload
No description provided by source. source: http://www.securityfocus.com/bid/17046/info Easy File Sharing Web Server is prone to multiple input-validation vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. The issues...
Simple PHP Blog 0.4 preview_static_cgi.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the...
Campus Bulletin Board 3.4 - post3/book.asp review Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied dat...