Design/Logic Flaw

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5...

CVE-2017-7174

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5...

CVE-2017-7174

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5...

CVE-2017-7174

CVE-2017-7174 affects Chef Manage, specifically the user-account creation feature in versions 2.1.0–2.4.4. Multiple sources describe a remote code execution vulnerability that can be exploited by remote attackers to run arbitrary code, with a fixed update available in version 2.4.5. The NVD entry...

PT-2017-17557

Name of the Vulnerable Software and Affected Versions Chef Manage versions 2.1.0 through 2.4.4 Description The user-account creation feature in Chef Manage allows remote attackers to execute arbitrary code. This issue is fixed in version 2.4.5. Recommendations For versions 2.1.0 through 2.4.4,...

CVE-2017-7174: Undefined Security Weakness

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5...

Citrix Director: Configuring,Managing Alerts and Notifications

In this article, we will take a look at how to configure, visualize your alerts, manage them, analyze their details and historically track alert trends...

CVE-2016-5364

Cross-site scripting XSS vulnerability in managecustomfieldeditpage.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter...

PT-2017-8711

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the return parameter in the manage custom field edit page.php file. Recommendations For Mantis...

CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

PT-2017-9633

Name of the Vulnerable Software and Affected Versions CADD-Solis Medication Safety Software versions 1.0 through 3.1 Description The issue allows an authenticated user to gain elevated privileges on the SQL database. This could enable the user to modify drug libraries, add and delete users, and...

Plone Incompletely Fixes Cross-Site Scripting Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on Zope based on Python's open source object-oriented Web application server.Zope ZMI is one of the management interface. A cross-site scripting vulnerability exists in the managefindResu...

PT-2017-9094

Name of the Vulnerable Software and Affected Versions Plone versions prior to 4.3.12 Plone versions 5.x prior to 5.0.7 Description A cross-site scripting XSS issue exists in the manage findResult component of the search feature in Zope ZMI, allowing remote attackers to inject arbitrary web script...

[SECURITY] Fedora 25 Update: runc-1.0.0-3.rc2.gitc91b5be.fc25

The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...

Cross-site scripting vulnerability in KingCMS 'manage_data.php' page

KingCMS is a content management system based on WEB technology. A cross-site scripting vulnerability exists in the KingCMS 'managedata.php' page. The program fails to filter user-supplied input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute...

The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Shell component in the Android operating system lies in the improper handling of the MANAGEUSERS and CREATEUSERS access control functions. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created...

UBUNTU-CVE-2016-3833

The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGEUSERS and CREATEUSERS permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka internal bug 29189712...

PT-2016-2554

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the improper management of the MANAGE USERS and CREATE USERS permissions in the Shell componen...

ZMS v3.2 CMS - Client Side Cross Site Web Vulnerabilities

Document Title: =============== ZMS v3.2 CMS - Client Side Cross Site Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1890 Release Date: ============= 2016-07-28 Vulnerability Laboratory ID VL-ID: ====================================...