DEBIAN-CVE-2021-26221

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

CVE-2021-1224

Removed by vendor...

healingintelligently.com Cross Site Scripting vulnerability OBB-1483140

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

celm.polito.it Cross Site Scripting vulnerability OBB-1474239

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

rwhometown.com Cross Site Scripting vulnerability OBB-1346585

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Template::Toolkit -- Directory traversal on write

Art Manion and Will Dormann report: By using an older and less-secure form of open, it is possible for untrusted template files to cause reads/writes outside of the template directories. This vulnerability is a component of the recent Citrix exploit...

PhantomJS Arbitrary File Read Vulnerability

PhantomJS is a headless browser for automating web interactions. A security vulnerability exists in the 'page.open' function of the web module in PhantomJS 2.1.1 and earlier versions. The vulnerability can be exploited by an attacker to read arbitrary files on the file system with the help of...

UBUNTU-CVE-2019-17221

PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open function of the webpage module, which loads a specified URL and calls a given callback. An attacker can supply a specially crafted HT...

CVE-2019-1010301

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo. The attack vector is: Open a specially crafted JPEG file...

PHPMiniAdmin Database Open Vulnerability

PHPMiniAdmin is a lightweight MySQL database management tool written in PHP. The tool supports common functions such as importing and exporting databases and executing SQL statements. An open database vulnerability exists in PHPMiniAdmin. An attacker can exploit the vulnerability to leak data,...

Kubernetes user privilege elevation vulnerability, the exposure to security risks-vulnerability warning-the black bar safety net

Recently, Kubernetes open source container software found a key of a user privilege elevation vulnerability, CVE-2018-1002105, which software is today most of the cloud infrastructure of the fixed component. This vulnerability can allow an attacker unrestricted remote access, steal data, or cause...

vdivani.co.il XSS vulnerability

Open Bug Bounty ID: OBB-581872 Description| Value ---|--- Affected Website:| vdivani.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WildMIDI Denial of Service Vulnerability

WildMIDI is a midi player that can convert midi files to audio files. A security vulnerability exists in the 'WildMidiOpen' function in versions after WildMIDI commit d8a466829c67cacbb1700beded25c448d99514e5. A remote attacker can exploit this vulnerability to cause a denial of service heap buffe...

[SECURITY] Fedora 23 Update: openvas-scanner-5.0.5-3.fc23

Scanner module for the Open Vulnerability Assessment System OpenVAS...

ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability EMC Identifier: ESA-2015-132 CVE Identifier: CVE-2015-4537 Severity Rating: CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C Affected products: • EMC Documentum D2 4.2 and earlier Summary: EMC...

[SECURITY] Fedora 21 Update: openvas-scanner-4.0.5-1.fc21

Scanner module for the Open Vulnerability Assessment System OpenVAS...

Fedora Update for python-djblets FEDORA-2013-17449

Check for the Version of python-djblets OpenVAS Vulnerability Test Fedora Update for python-djblets FEDORA-2013-17449 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Ubuntu 10.04 LTS / 10.10 / 11.04 : likewise-open vulnerability (USN-1171-1)

It was discovered that a SQL injection vulnerability exists in the Likewise Security Authority lsass local authentication provider. A local attacker could use this to gain elevated privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

Ubuntu Update for likewise-open vulnerability USN-964-1

Ubuntu Update for Linux kernel vulnerabilities USN-964-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9641.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for likewise-open vulnerability USN-964-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

快客电邮(QuarkMail)远程命令执行漏洞

快客电邮（QuarkMail）是北京雄智伟业科技公司推出的电子邮件系统，被广泛用于各个领域的电子邮件解决方案，其webmail部分使用perl cgi编写，但是80sec在其系统中发现一个重大的安全漏洞，导致远程用户可以在邮件系统上以当前进程身份执行任意命令，从而进一步控制主机或者系统。 QuarkMail错误地使用perl的open函数以打开文件，实现模板等功能，但是其对用户传入的参数没有做有效的过滤，从而导致一个命令执行漏洞。 登录进入系统之后访问如下URL...