1579 matches found
CVE-2017-3314
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
MariaDB Server 10.1.x < 10.1.21 Multiple Vulnerabilities
Binary data 9915.prm...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-01022)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...
openWYSIWYG Insert Image 1.4.7 Arbitrary File Upload Vulnerability
openWYSIWYG Insert Image version 1.4.7 suffers from a remote arbitrary unauthenticated file upload vulnerability Exploit Title: openWYSIWYG | Insert Image v1.4.7 / Unauthenticated File Upload Date: 2017-1-15 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home :...
libreoffice: Heap-buffer-overflow in tools::Polygon::Insert
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6633131901714432 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...
Spoofing Via Manifest
borgbackup is vulnerable to spoofing attacks. It does not verify the manifest, allowing an attacker to spoof. To exploit the vulnerability, it requires an attacker to be able to insert files with no additional headers into backups, and have write access to the repository. This vulnerability does...
Apple macOS 10.12.2 iOS 10.2 - _kernelrpc_mach_port_insert_right_trap Kernel Reference Count Leak Use-After-Free
Apple macOS 10.12.2 iOS 10.2 - kernelrpcmachportinsertrighttrap Kernel Reference Count Leak Use-After-Free / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=941 Proofs of Concept: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/40956.zip The...
Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (1)
Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free MS13-037 1 window.onload=functionlocation.reload;; text .float float:left; .zoom zoom:3000%; .border::first-letter...
WordPress Plugin Insert Html Snippet Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in Wordpress plugin Insert Html Snippet version 1.2. The...
WordPress Insert Html Snippet 1.2 Cross Site Request Forgery Vulnerability
WordPress Insert Html Snippet plugin version 1.2 suffers from a cross site request forgery vulnerability. ------------------------------------------------------------------------ Cross-Site Request Forgery in Insert Html Snippet WordPress Plugin...
WordPress Insert Html Snippet 1.2 Cross Site Request Forgery
------------------------------------------------------------------------ Cross-Site Request Forgery in Insert Html Snippet WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Solaris Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Bash subcomponent of the Oracle Solaris component version 10 of the Oracle Sun Systems Products Suite. An...
SQL Injection Vulnerability in zabbix
zabbix is an open source enterprise performance monitoring solution. A SQL injection vulnerability exists in the insert method of the profileIdx2 parameter in zabbix's jsrpc. An attacker can log in to the zabbix management system without authorization, and can also directly obtain operational...
Oracle Communications Applications Unspecified Vulnerability in Oracle Communications EAGLE Application Processor Component
Oracle Communications is a suite of communications applications for rapidly delivering and monetizing digital lifestyle services from Oracle Corporation. the Oracle Communications EAGLE Application Processor is one of the platform components that provides Signaling Transmission Points STPs,...
DSA-3621-1 mysql-connector-java - security update
Bulletin has no description...
Unspecified Vulnerability in Oracle Financial Services Software Oracle FLEXCUBE Direct Banking Component (CNVD-2016-02479)
Oracle Financial Services Software is a set of Oracle's core banking, online banking and property management financial services software, of which Oracle FLEXCUBE Direct Banking is a set of Internet and mobile banking solution components. An unspecified vulnerability exists in the Pre-Login...
Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02558)
Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the PIA Search Functionality...
WordPress Tidio Gallery Plugin <= 1.1 - Cross Site Scripting (XSS)
This vulnerability is in the php code /tidio-gallery/popup-insert-help.php. Solution Update the plugin...
Scientific Linux Security Update : mariadb on SL7.x x86_64 (20160404)
Security Fixes : - It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when establishing secure connections using TLS/SSL. A man-in-the-middle attacker could possibly use this flaw to impersonate a server to a...
UEFI firmware image viewer and editor: UEFITool
It supports parsing of full BIOS images starting with the flash descriptor or any binary files containing UEFI volumes. Original development was started here at MDL forums as a cross-platform analog to PhoenixTool ‘s structure mode with some additional features, but the program’s engine was prove...