776 matches found
RHEL 6 : Virtualization Manager (RHSA-2016:1929)
An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Error: "Server Still Booting" and XenServer not exiting maintenance mode after unexpected shutdown
After an unexpected shutdown or restart, your XenServer host might experience of the following issues: Hostswith more than 100 days uptime and local storage attached when rebooted can't connect to the local storage. The host doesnot come out ofmaintenance mode. When you try to exit the server fro...
WordPress Maintenance Mode Plugin <= 2.0.6 - Information Disclosure
This plugin is prone to a subscriber information disclosure vulnerability. Solution Update the plugin...
WordPress Maintenance Mode Plugin <= 2.0.6 - Missing Settings Authorization
This plugin is prone to a missing settings authorization vulnerability. Solution Upgrade the plugin...
WP Maintenance Mode <= 2.0.6 - Missing Settings Authorization
The WP Maintenance Mode WordPress plugin was affected by a Missing Settings Authorization security vulnerability...
WP Maintenance Mode <= 2.0.6 - Authenticated Multisite Remote Code Execution
The WP Maintenance Mode WordPress plugin was affected by an Authenticated Multisite Remote Code Execution security vulnerability...
WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting
WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting Vendor Homepage: http://bridge.qodeinteractive.com/ Software Link: http://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054 Version: 9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Stored XSS,...
CVE-2015-8766
Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Backup action is XSRF vulnerable
XSRF vulnerability was identified and fixed, so it was possible to trigger backup action taking application into maintenance mode. This could lead to overwriting an existing backup file...
Oxwall 1.7.4 - Cross-Site Request Forgery
Advisory ID: HTB23266 Product: Oxwall Vendor: http://www.oxwall.org Vulnerable Versions: 1.7.4 and probably prior Tested Version: 1.7.4 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Vendor Patch: September 8, 2015 Public Disclosure: October 22, 201...
Code injection
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service maintenance-mode transition and data-storage outage by calling the System Administration Mode function...
IBM OpenPages GRC Platform Access Check Vulnerability
IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. The IBM OpenPages GRC Platform did not perform adequate access checks for System Administration Mode, allowing a remote attacker to exploit a vulnerability th...
WordPress YITH Maintenance Mode Plugin <= 1.1.4 - Cross-Site Scripting
Because of this vulnerability, authenticated administrators can store HTML and JS code. Solution Update the plugin...
WordPress DP Maintenance Mode Lite Plugin <= 2.0.226 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress DP Maintenance Mode Lite Plugin <= 2.0.226 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
RHEL 6 : rhev-hypervisor6 (RHSA-2013:0907)
An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
WordPress Coming soon and Maintenance mode Plugin <= 0.5.0 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...