PT-2019-18277

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description The issue is related to SQL injection via the admin.php?mod=order API endpoint, specifically through the state parameter. Recommendations For PHPSHE version 1.7, consider restricting access to the...

PT-2019-18276

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description The issue is related to SQL injection. It occurs via the admin.php?mod=product&act=state API endpoint, specifically through the product id parameter. Recommendations For PHPSHE version 1.7, consider restricting...

PT-2019-3931 · Apache +3 · Apache Http Server +3

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.37 through 2.4.38 Description: The issue is related to a flaw in the mod ssl component of the Apache HTTP Server, specifically concerning inadequate access control. This flaw can be exploited by a remote attack...

Apache -- vulnerability

The Apache httpd Project reports: SECURITY: CVE-2018-17199 modsession: modsessioncookie does not respect expiry time allowing sessions to be reused. SECURITY: CVE-2019-0190 modssl: Fix infinite loop triggered by a client-initiated renegotiation in TLSv1.2 or earlier with OpenSSL 1.1.1 and later. ...

PT-2019-3123

Name of the Vulnerable Software and Affected Versions Apache HTTP Server version 2.4.37 OpenSSL versions 1.1.1 or earlier Description A problem exists in the way mod ssl handles client renegotiations, allowing a remote attacker to send a specially crafted request that could cause mod ssl to enter...

PT-2019-1346

Name of the Vulnerable Software and Affected Versions Apache Subversion mod dav svn module versions 1.10.0 through 1.10.3 Apache Subversion mod dav svn module version 1.11.0 Description The issue is related to a pointer dereference error in the mod dav svn module of Apache Subversion. This can be...

PT-2019-18060

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.2 Description An issue was discovered that leads to a stored XSS vulnerability due to inadequate escaping in mod banners. Recommendations For versions prior to 3.9.2, update to version 3.9.2 or later to resolve th...

Joomla! cross-site scripting vulnerability (CNVD-2019-14557)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in modbanners in Joomla! versions 2.5...

Denial Of Service (DoS)

openvswitch is vulnerable to denial of service. An assertion failure in the parsegrouppropntrselectionmethod function in lib/ofp-util.c allows for an attacker to cause a denial of service condition in the application. This is due to an invalid group type during decoding of a group mod when the...

Privilege Escalation

modcluster is vulnerable to privilege escalation. The root context of the server is registered and exposed by default, allowing a remote attacker to bypass intended access restrictions and gain access to the application via unknown vectors...

Fedora 28 : freedink-dfarc (2018-f2e8788852)

New upstream release Fix directory traversal in D-Mod extractor CVE-2018-0496 1584843 no answer from security team Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

Debian DSA-4357-1 : libapache-mod-jk - security update

Raphael Arrouas and Jean Lejeune discovered an access control bypass vulnerability in modjk, the Apache connector for the Tomcat Java servlet engine. The vulnerability is addressed by upgrading modjk to the new upstream version 1.2.46, which includes additional changes. -...

CVE-2018-20369: Improper Neutralization of Input During Web Page Generation

Barracuda Message Archiver 2018 has XSS in the errormsg exception-handling value for the ldapuser parameter to the cgi-mod/ldaploadentry.cgi module. The injection point of the issue is the AddUpdate module...

PT-2018-15325

Name of the Vulnerable Software and Affected Versions Barracuda Message Archiver version 2018 Description The issue concerns an XSS vulnerability in the error msg exception-handling value for the ldap user parameter to the cgi-mod/ldap load entry.cgi module. The injection point of the issue is th...

[SECURITY] [DSA 4357-1] libapache-mod-jk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4357-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 20, 2018 https://www.debian.org/security/faq -...

PT-2018-9593

Name of the Vulnerable Software and Affected Versions: HotelDruid version 2.3.0 and earlier Description: The issue is related to a SQL Injection vulnerability in the id utente mod parameter of the gestione utenti.php file. This can allow an attacker to dump all database records of the backend web...

DSA-4357-1 libapache-mod-jk - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4357-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1609-1 : libapache-mod-jk security update

A vulnerability has been discovered in libapache-mod-jk, the Apache 2 connector for the Tomcat Java servlet engine. The libapache-mod-jk connector is susceptible to information disclosure and privilege escalation because of a mishandling of URL normalization. The nature of the fix required that...

[SECURITY] [DLA 1609-1] libapache-mod-jk security update

Package : libapache-mod-jk Version : 1.2.46-0+deb8u1 CVE ID : CVE-2018-11759 A vulnerability has been discovered in libapache-mod-jk, the Apache 2 connector for the Tomcat Java servlet engine. The libapache-mod-jk connector is susceptible to information disclosure and privilege escalation because...