CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

File Sharing Manager 1.0 Local File Inclusion / File Upload

Document Title: =============== File Sharing Manager v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1715 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================...

PressePortal NewsAktuell (DPA) - Multiple Vulnerabilities

Document Title: =============== PressePortal NewsAktuell DPA - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1676 Vulnerability Magazine:...

Getdpd BB #4 - (name) Persistent Validation Vulnerability

Document Title: =============== Getdpd BB 4 - name Persistent Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1568 ID: 14772 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID:...

Getdpd BB #4 - (name) Persistent Validation Vulnerability

Document Title: =============== Getdpd BB 4 - name Persistent Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1568 ID: 14772 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID:...

Vulnerability of the Java Platform software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to affect the integrity, availability, and confidentiality of information by manipulating RMI...

Getdpd BB #5 - Persistent Filename Vulnerability

Document Title: =============== Getdpd BB 5 - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1569 ID: 14773 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Netgear N300 Wireless Router Authentication Bypass Vulnerability

Netgear N300 wireless router is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-7537

Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...

CVE-2015-7537

Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...

Getdpd BB #3 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Getdpd BB 3 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1567 ID: 14771 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID:...

File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities

Document Title: =============== File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1704 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ====================================...

OpenJDK: logging of RMI connection secrets (JMX, 8130710)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX...

OpenJDK: logging of RMI connection secrets (JMX, 8130710)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX...

OpenJDK: logging of RMI connection secrets (JMX, 8130710)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX...

Getdpd BB #1 - Persistent Web Vulnerability

Document Title: =============== Getdpd BB 1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 ID: 14770 Release Date: ============= 2016-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 1564...

File Hub 3.3 Arbitrary File Upload / Script Insertion

Document Title: =============== File Hub v3.3 iOS Wifi - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1695 Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID: ==================================== 1695...

CVE-2016-1943

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method...

Design/Logic Flaw

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method...

CVE-2016-1943

Consolidated details show CVE-2016-1943 affects Mozilla Firefox on Android, where the address bar can be spoofed via the scrollTo method. OpenSUSE release notes (openSUSE-2016-128/0306-1/0309) document Firefox 44.0 and NSS/NSPR updates as fixes, explicitly listing CVE-2016-1943 as part of address...