DEBIAN-CVE-2016-10204

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...

CVE-2016-10204

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...

CVE-2016-10204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...

PT-2017-7802

Name of the Vulnerable Software and Affected Versions Zoneminder versions 1.30 and earlier ALT Linux affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the limit parameter in a log query request to "index.php"...

YouTube encrypted video there are multiple universal password can bypass the limit(wonderful vulnerability)-vulnerability warning-the black bar safety net

YouTube encrypted Video, a plurality of universal password Detailed description: As long as the Password box, enter the two English double quotation marks. For example: "" press the OK button to play all the encrypted videos. Management added: "" \ %% or a=a And other characters can bypass video...

Munin Local File Write Vulnerability

Munin is a set of network resource monitoring tools. The tool monitors core system resources including memory, disk, CPU usage, server applications and more. A local file write vulnerability exists in Munin versions prior to 2.999.6. An attacker can exploit the vulnerability by setting multiple...

DEBIAN-CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

PT-2017-16936

Name of the Vulnerable Software and Affected Versions Munin versions prior to 2.999.6 Description The issue allows for local file write access when CGI graphs are enabled. By setting multiple upper limit GET parameters, it is possible to overwrite any file accessible to the www-data user. This ca...

UBUNTU-CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

WordPress: Wordpress 4.7.2 - Two XSS in Media Upload when file too large.

Description ------------------- An attacker can inject a malicious script in to the filename which a victim tries to upload leading to XSS inside the administrators control panel. Two different "file to large" cases end up in interpolating the file name and appending it into DOM unsanitized leadi...

kernel: pipe: limit the per-user amount of pages allocated in pipes

It is possible for a single process to cause an OOM condition by filling large pipes with data that are never read. A typical process filling 4096 pipes with 1 MB of data will use 4 GB of memory and there can be multiple such processes, up to a per-user-limit...

Buffer Overflow

ImageMagick is vulnerable to buffer overflows. When a memory limit is set, a malicious user can trigger a heap-based buffer overflow or cause a invalid write operation via the SetPixelIndex function...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a perpetrator to create files that cannot be deleted.

The vulnerability of the embedded software of the OVEEN PLC110 programmable logic controller lies in the absence of restrictions on the length of filenames for written files. Exploiting this vulnerability allows a malicious actor to store files in the file system that cannot be deleted using the...

ALPINE-CVE-2016-9386

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values...

Nextcloud: Missing Rate Limit for Current Password field in nextcloud.com

There is no rate limit enabled for "Current Password" field on Setting page of nextcloud.com. A malicious minded user can continually tries to brute force an account password...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0004)

The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: Fix short sprintf buffer in /proc/keys show function David Howells Orabug: 25306361 CVE-2016-7042 - nvme: Limit command retries Keith Busch Orabug: 25374751 - fs/proc/taskmmu.c: fix mmaccess mod...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the RegExp class in the Flash Player software platform arises from a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code upon installing a plugin...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the RegExp class in the Flash Player software platform arises from a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code as a result of violating the search functionality...

PT-2017-8997 · Docker · Swarmkit +1

Name of the Vulnerable Software and Affected Versions: SwarmKit toolkit version 1.12.0 for Docker Description: The issue allows remote authenticated users to cause a denial of service, specifically the prevention of cluster joins, via a long sequence of join and quit actions. The vendor disputes...

wordpress plugin limit-bio cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wordpress plugin limit-bio, which allows an attacker to frame a malicious...