18928 matches found
CVE-2017-7290
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
CVE-2017-7290
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
[SECURITY] [DLA 879-1] firebird2.5 security update
Package : firebird2.5 Version : 2.5.2.26540.ds4-1deb7u3 CVE ID : CVE-2017-6369 Debian Bug : 858641 George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions UDF, thus allowing remote authenticated users to execute arbitrary code on t...
[SECURITY] [DSA 3824-1] firebird2.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3824-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 29, 2017 https://www.debian.org/security/faq -...
CVE-2017-5900
Cross-site scripting XSS vulnerability in the NetComm NB16WV-02 router with firmware NB16WVR0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm...
Cross site scripting
Cross-site scripting XSS vulnerability in the NetComm NB16WV-02 router with firmware NB16WVR0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm...
Debian Security Advisory DSA 3824-1 (firebird2.5 - security update)
George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions UDF, thus allowing remote authenticated users to execute arbitrary code on the firebird server. OpenVAS Vulnerability Test $Id: deb3824.nasl 6607 2017-07-07 12:04:25Z cfischer...
SolarWinds Log and Event Manager Remote Code Execution Vulnerability
SolarWinds Log and Event Manager LEM, a.k.a. SIEM is a log and event manager from the U.S.-based SolarWinds that provides real-time log analysis, memory event correlation, and threat attack response. A remote code execution vulnerability exists in SolarWinds Log and Event Manager. A remote...
CVE-2017-6463
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...
CVE-2017-6463
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...
DEBIAN-CVE-2017-6458
Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...
Design/Logic Flaw
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...
CVE-2017-6458
Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...
CVE-2017-6458
Removed by vendor...
Cross site scripting
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
PYSEC-2017-100
Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...
Directory traversal
Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...