seacms search.php code execution vulnerability

function parseIf$content if strpos$content,'if:'=== false return $content; else $labelRule = buildregx"if:.? .? end if","is"; $labelRule2="elseif"; $labelRule3="else"; pregmatchall$labelRule,$content,$iar; $arlen=count$iar0; $elseIfFlag=false; for$m=0;$mparseStrIf$strIf; $strThen=$iar2$m;...

CVE-2017-5990

An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/labelmgr/jsinclude.php" and...

ALPINE-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

UBUNTU-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

PowerDNS Recursor Label Decompression DoS Vulnerability (2015-01)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2016-3136 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to multiple memory leaks in the caption and label handling code, allowing remote attackers to cause a denial of service due to memory consumption via unspecified...

UBUNTU-CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

UBUNTU-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

Huawei CloudEngine 12800 Switch Memory Disclosure Vulnerability (CNVD-2016-12844)

Huawei CloudEngine 12800 is a switch device from Huawei, China. The Huawei CloudEngine 12800 switch memory leak vulnerability. The memory leak is caused by the LDP processing module not freeing the memory requested for processing messages when it processes messages and finds abnormal values for...

CVE-2016-3173

An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file e.g. an image which gets displayed at the portal application. Using script code at the file name leads t...

CVE-2016-3173

An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file e.g. an image which gets displayed at the portal application. Using script code at the file name leads t...

Huawei CloudEngine 12800 Switch Memory Leak Vulnerability

Huawei CloudEngine 12800 is a switch device from Huawei, China. The Huawei CloudEngine 12800 switch memory disclosure vulnerability. Due to a lack of validation of certain fields in a message, the LDP Label Distribution Protocol processing module does not free memory requested to process the...

Change "User Name" text at login page

In order to avoid confusion for users we need to change the text on the StoreFront webpage from "User Name" to "eID" in order to match nomenclature in use at our university...

Memory leak vulnerability in several Huawei products

Huawei AR3200 is a Huawei router device, and S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700 are Huawei switch devices. A memory disclosure vulnerability exists in multiple Huawei products. Due to the device's Multiprotocol Label Switching MPLS message processing module repeatedly...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2016-11388)

Huawei S9700 and others are S-series switches from Huawei China. A denial of service vulnerability exists in multiple Huawei products, which originates from a program failing to properly validate Multiprotocol Label Switching MPLS messages. A remote attacker could cause a denial of service by...

DEBIAN-CVE-2016-5427

PowerDNS aka pdns Authoritative Server before 3.4.10 does not properly handle a . dot inside labels, which allows remote attackers to cause a denial of service backend CPU consumption via a crafted DNS query...

Threat Outbreak Alert RuleID24489: Email Messages Distributing Malicious Software on September 26, 2016

Medium Alert ID: 48861 First Published: 2016 September 12 19:18 GMT Last Updated: 2016 September 27 13:47 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

Threat Outbreak Alert RuleID24803: Email Messages Distributing Malicious Software on September 11, 2016

Medium Alert ID: 48831 First Published: 2016 September 12 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24803 may contain the following files: Name ...

Threat Outbreak Alert RuleID24847: Email Messages Distributing Malicious Software on September 7, 2016

Medium Alert ID: 48797 First Published: 2016 September 7 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24847 may contain the following files: Name |...

GitLab: Boards leak private label names and desciptions

Vulnerability details In anticipation of today's release, I took a look at the new boards feature - which, unrelated to this report, is awesome! There turns out to be an IDOR vulnerability when creating a list based on a label. An attacker can create a list with a label ID that belongs to a priva...