[SECURITY] Fedora 27 Update: php-phpmailer6-6.0.6-1.fc27

PHPMailer - A full-featured email creation and transfer class for PHP Class Features Probably the world's most popular code for sending email from PHP! Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more Integrated SMTP support - send without a local...

[SECURITY] Fedora 27 Update: php-PHPMailer-5.2.27-1.fc27

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

com.amazon.emr:hive2-shims (>=5.0.0 <=5.6.0), com.boozallen.aissemble:extensions-data-delivery-spark (>=1.13.0-rc6 <=2.0.0) +59 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-exec (>=2.1.0 <=2.3.2)

org.apache.hive:hive-exec MAVEN version =2.1.0, =5.0.0, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =4.1.2-RELEASE, =4.0.0-preview22.0.1, =5.6.0, =4.1.0, =4.0.00.31.1-prerelease6, =4.0.0, =4.1.0, =4.2.0 and more Source cves: CVE-2018-1315 Source advisory: OSV:GHSA-P639-XXV5-J...

S-CMS Cross-Site Request Forgery Vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 1.5 there is a cross-site request forgery vulnerability, attackers can add new users through admin/ajax.php?type=member&action=add URI to take...

CVE-2018-19332

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

CVE-2018-19332

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

Sql injection

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

Cross site request forgery (csrf)

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19332

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

CVE-2018-19332

CVE-2018-19332 affects S-CMS v1.5 and is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add endpoint. The CVE entry documents a cross-site request forgery flaw enabling unauthorized user creation, with CVSS data indicating a network-based, user-interaction-...

CVE-2018-19331

CVE-2018-19331 affects S-CMS v1.5: the search.php endpoint is vulnerable to SQL injection via the keyword parameter. Root cause: unsafely constructed SQL in the search feature. Exploitation via keyword parameter is documented; this could enable a SQL injection attack. No remediation or patch deta...

CVE-2018-9528

In ixheaacdoverlapadd1armv8 of ixheaacdoverlapadd1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

ICSA-18-317-04 Siemens SCALANCE S

1. EXECUTIVE SUMMARY CVSS v3 4.7 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SCALANCE S Vulnerability: Cross-site Scripting 2. RISK EVALUATION If an attacker tricks a user into clicking a malicious link, the device could allow arbitrary script injection XSS. 3. TECHNICAL DETAILS...

S-CMS Cross-Site Scripting Vulnerability

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

Cross site scripting

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...