8563 matches found
NewStart CGSL MAIN 4.05 : mercurial Vulnerability (NS-SA-2019-0104)
The remote NewStart CGSL host, running version MAIN 4.05, has mercurial packages installed that are affected by a vulnerability: - A flaw was found in the way hg serve --stdio command in Mercurial handled command-line options. A remote, authenticated attacker could use this flaw to execute...
NewStart CGSL CORE 5.04 / MAIN 5.04 : golang Multiple Vulnerabilities (NS-SA-2019-0047)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has golang packages installed that are affected by multiple vulnerabilities: - An arbitrary command execution flaw was found in the way Go's go get command handled the checkout of source code repositories. A remote attacker...
CVE-2019-12258
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options...
CVE-2019-12256
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...
CVE-2019-12256
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...
CVE-2019-14796
The mq-woocommerce-products-price-bulk-edit aka Woocommerce Products Price Bulk Edit plugin 2.0 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=updateoptions showproductspagelimit parameter...
PT-2019-13841 · Woocommerce · Mq-Woocommerce-Products-Price-Bulk-Edit
Name of the Vulnerable Software and Affected Versions: mq-woocommerce-products-price-bulk-edit plugin version 2.0 Description: The issue allows for XSS via the "wp-admin/admin-ajax.php?action=update options" API endpoint, specifically through the show products page limit parameter. Recommendation...
CVE-2019-12256 - VxWorks IPv4 Options Buffer Overflow
This vulnerability can be triggered by a specially crafted IP packet sent to the target device, even as a broadcast or multicast packet. It does not require any specific application or configuration to be running on the device, and it affects any device running VxWorks v6.9.4 or above with a...
PT-2019-4737 · Wind River · Vxworks
Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 7 Description: The issue is related to errors in forming TCP options in the TCP component, which can lead to a denial of service DoS of TCP connections via malformed TCP options. This can be exploited b...
CVE-2019-14682
The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...
WordPress Login or Logout Menu Item plugin <= 1.1.1 - Unauthenticated Options Change vulnerability
Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Login or Logout Menu Item plugin versions = 1.1.1. Solution Update the WordPress Login or Logout Menu Item plugin to the latest available version at least 1.2.0...
TOP 10 BEST PRACTICES FOR SECURING CLOUD WORKFLOWS
Cloud migration is a double-edged sword. While promising greater scalability, agility, and even new approaches to applications, it also introduces complexity--which means more security risk. Security vulnerabilities exposed in breach after breach have highlighted the risk that comes with the clou...
Login Or Logout Menu Item <= 1.1.1 - Unauthenticated Options Change
The Login or Logout Menu Item WordPress plugin was affected by an Unauthenticated Options Change security vulnerability...
mysql: Server: Options unspecified vulnerability (CPU Jul 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocol...
WordPress Travel Management plugin <= 1.5 - Unauthenticated Options Change vulnerability
Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Travel Management plugin versions = 1.5. Solution Update the WordPress Travel Management plugin to the latest available version at least 1.6.1...
WordPress Learning Courses plugin <= 4.7 - Unauthenticated Options Change vulnerability
Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Learning Courses plugin versions = 4.7. Solution Update the WordPress Learning Courses plugin to the latest available version at least 4.8...
WordPress Booking plugin <= 2.4 - Unauthenticated Options Change vulnerability
Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Booking plugin versions = 2.4. Solution Update the WordPress Booking plugin to the latest available version at least 2.4.2...
SUSE-SU-2019:2046-1 Security update for ardana packages
This update for ardana package fixes the following issues: - Update to version 9.0+git.1560211997.7ac9792: Adds repository list parameter bsc1122825 - Update to version 9.0+git.1557219331.457b6e7: Update gerrit location SCRD-9140 - Switch to new Gerrit Server - Update to version...
Remote code execution
In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9...