Koha Libraries Cross-Site Request Forgery Vulnerability

Koha Libraries is an open source library automation system ILS developed by the Koha community. The system provides features such as categorization, retrieval, membership and patron management. A cross-site request forgery vulnerability exists in Koha Libraries. A remote attacker could exploit th...

Wube Factorio Security Bypass Vulnerability

Wube Factorio Alien Factory is a factory construction game from Wube Software, Czech Republic. A security vulnerability exists in the Lua interface in versions of Wube Factorio prior to 0.15.31. A remote attacker can exploit this vulnerability by including and loading C libraries to bypass the...

Google Android Libraries Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Libraries is a library. An information disclosure vulnerability exists in Libraries in Android. A remote attack could exploit this vulnerability to gain unauthorized acce...

Oracle Java SE 6 < Update 161 / 7 < Update 151 / 8 < Update 141 Multiple Vulnerabilities

Binary data 700165.prm...

Installer of Tween may insecurely load Dynamic Link Libraries

Overview Tween is a twitter client application. Installer of Tween contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

Sql injection

dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...

Sql injection

dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php...

CVE-2017-11584

dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php...

Sql injection

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

PT-2017-12117

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.9 Description The issue concerns a SQL Injection flaw. It can be exploited via the num parameter in requests to "libraries/Template.php" with either "action=related" or "action=tags". Recommendations For FineCms version...

CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

CVE-2017-11582

CVE-2017-11582 concerns dayrui FineCms 5.0.9, with a SQL Injection vulnerability in the libraries/Template.php file. The flaw is exploitable via the num parameter in requests for action=related or action=tags, enabling a remote attacker to execute arbitrary SQL commands. Multiple sources in the c...

JVN#17523256: Installer of Tween may insecurely load Dynamic Link Libraries

Tween is a twitter client application. Installer of Tween contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer...

PT-2017-12118

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.9 Description The issue is related to SQL Injection, which can be exploited via the catid parameter in an "action=related" request to the "libraries/Template.php" endpoint. Recommendations For FineCms version 5.0.9, avoid...

CVE-2017-11582: Improper Neutralization of Special Elements used in an SQL Command

dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...

CVE-2017-11584: Improper Neutralization of Special Elements used in an SQL Command

dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php...

CVE-2017-11585: Improper Control of Generation of Code

dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection...

CVE-2017-11582

dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php...

PT-2017-12120

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.9 Description The issue concerns remote PHP code execution via the param parameter in an "action=cache" request to "libraries/Template.php", which is an example of Eval Injection. Recommendations For FineCms version 5.0.9,...