5887 matches found
Tidy prvTidyTidyMetaCharset Function Denial of Service Vulnerability
Tidy is the United States of America's World Wide Web Consortium W3C researcher Dave Raggett developed a used to correct and clean up the HTML file errors and neatly arrange the code i.e., indentation of the software and function libraries. A denial of service vulnerability exists in the...
DEBIAN-CVE-2017-17497
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service Segmentation Fault, because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value...
[SECURITY] Fedora 25 Update: kernel-4.13.16-100.fc25
The kernel meta package...
WordPress Emag Marketplace Connector Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Emag Marketplace Connector plugin is used in which a can be WooCommerec store and the The eMAG Marketplace...
CVE-2017-17043
The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...
PT-2017-14679
Name of the Vulnerable Software and Affected Versions Emag Marketplace Connector plugin version 1.0.0 Description The issue is related to reflected XSS. The parameter post to the API endpoint "/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php" is not filtered...
[SECURITY] Fedora 27 Update: git-2.14.3-2.fc27
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
[SECURITY] Fedora 25 Update: kernel-4.13.13-100.fc25
The kernel meta package...
WordPress: Arbitrary file deletion in wp-core - guides towards RCE and information disclosure
Vulnerable place 1: wp-admin/post.php $newmeta'thumb' is placed into DB not sanitized directly from user input. case 'editattachment': checkadminreferer'update-post' . $postid; // Don't let these be changed unset$POST'guid'; $POST'posttype' = 'attachment'; // Update the thumbnail filename $newmet...
[SECURITY] Fedora 27 Update: kernel-4.13.13-300.fc27
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.13.13-200.fc26
The kernel meta package...
MGASA-2017-0413 Updated libextractor packages fix security vulnerabilities
In 'EXTRACTORwavextractmethod' function of wavextractor.c, the program does not check the value of samplerate, with a crafted file, the samplerate can be set to zero, resulting in a divide by zero and a crash CVE-2017-15266. NULL Pointer Dereference vulnerability in libextract when getting flac...
UBUNTU-CVE-2017-7837
SVG loaded through "" tags can use "" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox 57...
[SECURITY] Fedora 25 Update: kernel-4.13.12-100.fc25
The kernel meta package...
Wordpress <= 4.8.2 SQL Injection POC
Author: Ambulong@vulspy I found this vulnerability after reading slavco’s post, and reported it to Wordpress Team via Hackerone on Sep. 2nd, 2017. But, unfortunately, WordPress team didn’t pay attention to this report too. SQL Injection Details Wordpress SQLi by slavco Wordpress SQLi — PoC by...
mozilla -- multiple vulnerabilities
Mozilla Foundation reports: CVE-2017-7828: Use-after-free of PressShell while restyling layout CVE-2017-7830: Cross-origin URL information leak through Resource Timing API CVE-2017-7831: Information disclosure of exposed properties on JavaScript proxy objects CVE-2017-7832: Domain spoofing throug...
[SECURITY] Fedora 27 Update: kernel-4.13.10-300.fc27
The kernel meta package...
[SECURITY] Fedora 27 Update: mingw-taglib-1.11.1-4.fc27
TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...