945 matches found
CVE-2016-2192
CVE-2016-2192 affects PostgreSQL PL/Java. Before 1.5.0, remote authenticated users could alter type mappings for types they do not own due to improper permission checks. Publicly documented impact is limited to changing mappings, with the vulnerability in PL/Java versions up to 1.4.x (pre-1.5.0)....
CVE-2016-0768
CVE-2016-0768 affects PostgreSQL PL/Java (9.0 and earlier); the issue is that access controls on large objects are not honored, potentially enabling access to arbitrary objects. The connected CNVD/OSV/NVD entries corroborate this vulnerability and describe it as a PostgreSQL PL/Java failure to en...
CVE-2016-2192
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...
PT-2017-7655
Name of the Vulnerable Software and Affected Versions PostgreSQL versions after 9.0 Description The issue concerns PostgreSQL PL/Java, where access controls on large objects are not honored. This could potentially allow unauthorized access to sensitive data. Recommendations For versions after 9.0...
PT-2017-7654
Name of the Vulnerable Software and Affected Versions PostgreSQL PL/Java versions prior to 1.5.0 Description The issue allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath. Recommendations For versions prior to 1.5.0, update to version...
CVE-2016-0768: Improper Access Control
PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...
PT-2017-8012
Name of the Vulnerable Software and Affected Versions PostgreSQL PL/Java versions prior to 1.5.0 Description The issue allows remote authenticated users to alter type mappings for types they do not own. Recommendations For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the...
CVE-2016-2192: Improper Privilege Management
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...
CVE-2016-0767: Improper Privilege Management
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...
camaro24.pl XSS vulnerability
Open Bug Bounty ID: OBB-225543 Description| Value ---|--- Affected Website:| camaro24.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-6534
Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...
CVE-2017-7321
setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...
CVE-2017-7320
setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service cookie quota exhaustion, or conduct HTTP Response Splitting attacks with resulta...
kawerak.org XSS vulnerability
Vulnerable URL: http://www.kawerak.org/cgi-bin/Calcium310.pl/Calendar/Calcium310.pl?CalendarName=%22%3E%3Cimg/src=%22%3E%22onerror=confirm%27XSSPOSED%27%3E=ShowIt=Month=Absolute=Block=9=8=Count=2016/12/1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...
e-mielec24.pl XSS vulnerability
Vulnerable URL: http://www.e-mielec24.pl/wp-content/themes/themerush/inc/plugins/shortcode/shortcodepopup.php?get=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6496794 VIP websi...
eksplozjasmaku.blox.pl XSS vulnerability
Vulnerable URL: http://eksplozjasmaku.blox.pl/html?page=blogPublicSearch= blogPublicSearch' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
dunja.blox.pl XSS vulnerability
Vulnerable URL: http://dunja.blox.pl/html?page=blogPublicSearch= blogPublicSearch' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
prus24.pl XSS vulnerability
Vulnerable URL: http://prus24.pl/bookstore,search?phrase=&search-condition;= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2099309 VIP website status:| No Check prus24.pl SSL...
oglaszamy24.pl XSS vulnerability
Vulnerable URL: http://www.oglaszamy24.pl/ogloszenia.php?std=1=%3C/title%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=7 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21265 VIP website...
