CVE-2014-9363

Open redirect vulnerability CVE-2014-9363 affects Drupal Meta tags quick module (7.x-2.x) prior to 7.x-2.8. The issue allows remote authenticated users to redirect others to arbitrary sites via the destination parameter in the path-based meta tag editing form. Impact is described as enabling phis...

CVE-2014-9363

Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

CVE-2014-9362

CVE-2014-9362 : A cross-site scripting (XSS) vulnerability in the Drupal contributed module Meta tags quick (7.x-2.x) up to version 7.x-2.7 (not affecting Drupal core) allows remote authenticated users who have the Edit path based meta tags permission to inject arbitrary HTML/JS via the path-base...

CVE-2014-9362

Cross-site scripting XSS vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users with the "Edit path based meta tags" permission to inject arbitrary web script or HTML via vectors related to deleting a...

[SECURITY] Fedora 21 Update: kernel-3.17.2-300.fc21

The kernel meta package...

[SECURITY] Fedora 21 Update: kernel-3.17.1-300.fc21

The kernel meta package...

Arachni v1.0 - Web Application Security Scanner Framework

Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan...

UBUNTU-CVE-2014-7960

OpenStack Object Storage Swift before 2.2.0 allows remote authenticated users to bypass the maxmetacount and other metadata constraints via multiple crafted requests which exceed the limit when combined...

[SECURITY] Fedora 21 Update: php-ZendFramework2-2.3.3-1.fc21

Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...

GitList URL Remote Code Execution (CVE-2014-4511)

A code execution vulnerability has been reported in GitList. The vulnerability is due to insufficient input validation for meta-characters passed in the request URL. A remote attacker could exploit this vulnerability by sending a malicious request to the vulnerable server...

[SECURITY] Fedora 21 Update: kernel-3.16.2-301.fc21

The kernel meta package...

[SECURITY] Fedora 21 Update: kernel-3.16.3-300.fc21

The kernel meta package...

[SECURITY] Fedora 19 Update: iodine-0.7.0-1.fc19

iodine lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries a re allowed. It runs on Linux, Mac OS X, FreeBSD, NetBSD, OpenBSD and Windows and needs a TUN/TAP device. The bandwidth is asymmetrical with...

Delightful Downloads 1.3.1.1 - meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass

The Delightful Downloads WordPress plugin was affected by a meta-boxes.php dedometaboxessave Function Multiple Action Authorization Bypass security vulnerability...

Facebook Opengraph Meta <= 1.0 - SQL Injection

The facebook-opengraph-meta-plugin WordPress plugin was affected by a SQL Injection security vulnerability...

User Meta Version 1.1.1 - Arbitrary File Upload

The User Meta – User Profile Builder and User management plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS

This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...

WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS

This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...

CVE-2014-4908

Multiple cross-site scripting XSS vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching 1 share/pnp/application/views/kohanaerrorpage.php or 2 share/pnp/application/views/template.php, leading to improper handling...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...