5887 matches found
harald-ebner.de XSS vulnerability
Open Bug Bounty ID: OBB-226735 Description| Value ---|--- Affected Website:| harald-ebner.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-3024
Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to an integer overflow that can occur wh...
[SECURITY] Fedora 25 Update: kernel-4.10.9-200.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.10.9-100.fc24
The kernel meta package...
CVE-2017-3052
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...
CVE-2017-3052
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...
CVE-2017-3052
Technical details for CVE-2017-3052 are not provided in the supplied documents. Monitor for updates from official advisories.
F5 Networks BIG-IP : Mailx vulnerabilities (K16945)
CVE-2014-7844 The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell meta characters in an email address. CVE-2004-2771 A flaw was found in the way mailx handled the parsing of email addresses...
e107 CMS 2.1.4 - Cross-Site Request Forgery
...
[SECURITY] Fedora 25 Update: kernel-4.10.8-200.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.10.8-100.fc24
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.9.17-100.fc24
The kernel meta package...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3234-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3234-1 advisory. Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access...
USN-3234-1: Linux kernel vulnerabilities
Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access could use this to specially craft an ext4 image that causes a denial of service system crash. CVE-2016-10208 It was discovered that the Linux...
CVE-2017-6814
In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...
CVE-2017-6814
In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...
CVE-2017-6814
In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...
WordPress 4.5.3 Audio Playlist Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 20...
MGASA-2017-0065 Updated kernel-linus fixes security vulnerabilities
This kernel-linus update is based on upstream 4.4.50 and fixes at least the following security issues: The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service system hang by leveraging access t...