9018 matches found
CVE-2016-9315: Undefined Security Weakness
Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or ad...
PT-2017-10052
Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions prior to 6.5 CP 1737 Description A privilege escalation issue allows authenticated, remote users with least privileges to change the Master Admin's password and/or add new adm...
PT-2017-9212
Name of the Vulnerable Software and Affected Versions Libav version 11.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted mp3 file. This is due to a problem in the sbr make f master function...
Code injection
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
CVE-2016-6173
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
CVE-2016-6173: Undefined Security Weakness
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
Information Disclosure
OpenSSL is vulnerable to decryption oracle attacks. A malicious user on the network can use the server as an oracle to determine the SSLv2 master key...
Followers Master for IG Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Followers Master for IG Prank published at the 'play' market has multiple vulnerabilities...
CVE-2017-2611
Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes SECURITY-389. The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes that a...
CVE-2017-5599
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inserted payload is rendered within the Patient Portal and the raceMasterList.jsp page does not requir...
New Relic: Restricted User can view multiple account details including customer_root_account_id, payment method, date of first payment, etc.
Summary When a restricted user visits this URL: There is a request sent to this URL: https://www.staging-bam.nr-data.net. Within that request leaks the following information about the entire account, that the restricted user can view:...
Insecure NAS Device Exposes 350 Ameriprise Investment Accounts
A trove of data belonging to Ameriprise Financial was found earlier this month that included Social Security numbers, decryption keys and confidential internal company documents. The breach is related to the use of a network attacked storage device that insecurely backed up data from an internal...
WordPress Quiz And Survey Master 4.7.8 / 4.5.4 XSS / CSRF
Details ================ Software: Quiz And Survey Master Formerly Quiz Master Next Version: 4.5.4,4.7.8 Homepage: https://wordpress.org/plugins/quiz-master-next/ Advisory report:...
WordPress Quiz And Survey Master 4.7.8 / 4.5.4 XSS / CSRF Vulnerabilities
WordPress Quiz and Survey Master versions 4.5.4 and 4.7.8 suffer from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Quiz And Survey Master Formerly Quiz Master Next Version: 4.5.4,4.7.8 Homepage:...
WordPress Plugin Quiz And Survey Master 4.5.44.7.8 - Cross-Site Request Forgery
WordPress Plugin Quiz And Survey Master 4.5.44.7.8 - Cross-Site Request Forgery alert1” in the questionname field then “question: ‘alert1’,” will get output inside the JS object. All good so far. However, in js/adminquestion.js on line 205, we see this line, as part of some JS-generated HTML:...
WordPress Quiz And Survey Master Plugin <= 4.7.8 - Multiple Vulnerabilities
This plugin is prone to a stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
TTL Master - Possible privilege escalation, Runtime command execution, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application TTL Master published at the 'play' market has multiple vulnerabilities...
PT-2021-5604 · Saltstack +2 · Saltstack Salt +2
Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3002.5 Description: The issue is related to errors in processing authentication requests for expired eauth tokens. This could allow a remote attacker to execute arbitrary commands, potentially against the salt...
CentOS 6 : 389-ds-base (CESA-2016:2765)
"An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Chess Master King - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Chess Master King published at the 'play' market has multiple vulnerabilities...