332 matches found
PT-2018-3356 · Siemens · Scalance X-200Irt +4
Name of the Vulnerable Software and Affected Versions: SCALANCE X-200 switch family incl. SIPLUS NET variants versions prior to V5.2.3 SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.4.1 SCALANCE X-200RNA switch family versions prior to V3.2.7 SCALANCE X-300 switch...
UBUNTU-CVE-2018-2842
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...
UBUNTU-CVE-2018-2836
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...
Microsoft Windows kernel local elevation of privilege vulnerability (CNVD-2018-08190)
Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are both operating systems released by Microsoft Corporation in the United States.Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is a server operating system. Windows Server 2008 R2 SP1 is a...
Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code +...
Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection
Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code +...
Redaxo CMS Addon MyEvents 2.2.1 SQL Injection
Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code + redaxo/src/addons/myevents/pages/eventadd.php...
Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection
Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code + redaxo/src/addons/myevents/pages/eventadd.php...
CVE-2017-17947
A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure PCS before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure PPS before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL...
CVE-2017-10408
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
mysql: Logging unspecified vulnerability (CPU Jan 2017)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Logging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQ...
"Authentication Failed! (401)" When Trying to Create or Edit a Connector
Unable to create or edit aconnector. When you try to select a Datacenter on a new Connector, or when the page attempts to render an existing Connector, you get this error:...
CVE-2017-3609
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
AZL-6628 CVE-2017-3616 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
AZL-6616 CVE-2017-3604 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2017-3474
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...
CVE-2017-7257
XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1content parameter. Someone must login to conduct the attack...
CVE-2017-7257
XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1content parameter. Someone must login to conduct the attack...