PT-2020-12536

Name of the Vulnerable Software and Affected Versions Puma versions prior to 3.12.6 Puma versions prior to 4.3.5 Description A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the clie...

PT-2017-4061

Name of the Vulnerable Software and Affected Versions jackson-databind versions prior to 2.6.7.1 jackson-databind versions prior to 2.7.9.1 jackson-databind versions prior to 2.8.9 jackson-databind versions 2.0.0 through 2.9.5 Description A deserialization flaw in the jackson-databind library is...

Opera Website - Cross Site Scripting Vulnerability

Document Title: =============== Opera Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=369 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 369 Comm...

ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-015 : 0Day HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-015 January 12, 2012 - -- CVE ID: CVE-2011-4788 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affecte...

PT-2012-2039 · Whmcs · Whmcs

Name of the Vulnerable Software and Affected Versions: WHMCS versions 4.0.x through 5.0.x Description: The issue is related to improper handling of characters in the subject field of a crafted ticket, which can trigger arbitrary code execution in the Smarty templating system. This allows remote...

Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability

====================================================================== Secunia Research 13/12/2011 - Sterling Trader Data Processing Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

PT-2011-4932 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 3.1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the username parameter in a setup action to "admin/company.php", or the PATH INFO to "admin/security...

PT-2011-4555 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 17 Description: The issue is related to an untrusted search path vulnerability in Mozilla Network Security Services NSS as used in Google Chrome. This might allow local users to gain privileges via a Trojan hor...

PT-2011-3542 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...

Mercator SENTINEL SQL injection allows authentication bypass

Overview Mercator SENTINEL contains an SQL injection vulnerability that could allow an attacker to bypass authentication and access the system with administrative privileges. Description Mercator SENTINEL is a flight safety management system. The login form of the web interface contains an SQL...

Microsoft SharePoint XML Handling Remote File Disclosure Vulnerability

Description Microsoft SharePoint is prone to a vulnerability that lets attackers access local files. An attacker can exploit this vulnerability to retrieve local files from a vulnerable computer in the context of the vulnerable service. Information obtained may aid in further attacks. Technologie...

PT-2012-1104 · Modplug +1 · Libmodplug +1

Name of the Vulnerable Software and Affected Versions: libmodplug versions prior to 0.8.8.4 Description: The issue concerns multiple vulnerabilities in the libmodplug package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protect...

PT-2012-1105 · Modplug +1 · Libmodplug +1

Name of the Vulnerable Software and Affected Versions: libmodplug versions prior to 0.8.8.4 Description: The issue is related to an off-by-one error in the CSoundFile::ReadAMS function, which can be exploited by remote attackers using a crafted AMS file with a large number of samples. This could...

PT-2011-4029 · Apache +1 · Mod Authnz External +2

Name of the Vulnerable Software and Affected Versions: mod authnz external module versions 3.2.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the user field. This is related to a SQL injection vulnerability in the mysql/mysql-auth.pl script. The...

PT-2011-3671

Name of the Vulnerable Software and Affected Versions Fabric versions prior to 1.1.0 Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain files, including /tmp/fab..tar files or other files in the top level of /tmp/. Recommendations For versions...

PT-2011-3438 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to incorrect driver object management in kernel-mode drivers, allowing local users to gain privileges via a crafted application. This could enable an...

PT-2011-3450 · Microsoft · Forefront Threat Management Gateway (Tmg) 2010

Name of the Vulnerable Software and Affected Versions: Microsoft Forefront Threat Management Gateway TMG 2010 Description: The issue allows remote attackers to execute arbitrary code via vectors involving unspecified requests. This is related to the NSPLookupServiceNext function in the client...

PT-2011-1331 · Cre Loaded · Cre Loaded

Name of the Vulnerable Software and Affected Versions: CRE Loaded versions prior to 6.2.14 Description: The issue allows remote attackers to bypass authentication and gain administrator privileges. This is related to a modified PHP SELF variable, which is not properly handled by includes in the...

PT-2011-2778 · Cisco · Cisco Unified Operations Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Operations Manager CUOM versions prior to 8.6 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the CCMs parameter to the "/iptm/PRTestCreation.do" API endpoint or the ccm...