Scald File - Critical - Remote Code Execution - SA-CONTRIB-2016-015

When a PDF is uploaded in Scald File, various tools can be executed if they're installed on the server, to try to generate a thumbnail out of that PDF. This is mitigated by the need to have the sufficient permissions to upload a file in Scald, and also to have at least one of the thumbnail creati...

Fedora 21 : drupal7-jquery_update-2.7-1.fc21 (2015-bf4adb12aa)

See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : drupal7-jquery_update-2.7-1.fc23 (2015-c2f6872886)

See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Google Analytics Counter - Moderately Critical - CSRF - SA-CONTRIB-2016-011

The Google Analytics Counter module provides total pageview counts for each page on a website. In that it is similar to the core Statistics module counter, but it is much lighter and ultimately faster because it draws on data from Google Analytics. This is why it is also able to effortlessly coun...

Cross-Site Scripting in TYPO3 component Backend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-006/...

Reflected file download vulnerability

More info at https://www.drupal.org/SA-CORE-2016-001...

Open redirect via double-encoded 'destination' parameter

More info at https://www.drupal.org/SA-CORE-2016-001...

Form API ignores access restrictions on submit buttons

More info at https://www.drupal.org/SA-CORE-2016-001...

Form API ignores access restrictions on submit buttons

More info at https://www.drupal.org/SA-CORE-2016-001...

Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability (cisco-sa-20160210-asa-ike)

Cisco ASA Software is prone to a buffer overflow vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

sa-debating.org.au XSS vulnerability

Vulnerable URL: http://www.sa-debating.org.au/Schools-Competition/Draws/My-Team-Draw.php?teamName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:39 GMT Vulnerability type:| XSS Vulnerability...

FreeBSD : openssh -- information disclosure (dfe0cdc1-baf2-11e5-863a-b499baebfeaf)

OpenSSH reports : OpenSSH clients between versions 5.4 and 7.1 are vulnerable to information disclosure that may allow a malicious server to retrieve information including under some circumstances, user's private keys. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Cisco Jabber for Windows 8.x / 9.x / 10.x / 11.0.x / 11.1.x XMPP Connection MitM STARTTLS Downgrade (cisco-sa-20151224-jab)

The version of Cisco Jabber for Windows installed on the remote host is 8.x, 9.x, 10.x, 11.0.x, or 11.1.x prior to 11.5. It is, therefore, affected by man-in-the-middle STARTTLS downgrade vulnerability due to improper checks to ensure the Extensible Messaging and Presence Protocol XMPP connection...

FreeBSD-SA-16:01.sctp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:01.sctp Security Advisory The FreeBSD Project Topic: SCTP ICMPv6 error message vulnerability Category: core Module: SCTP Announced: 2016-01-14 Credits:...

FreeBSD-SA-16:02.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:02.ntp Security Advisory The FreeBSD Project Topic: ntp panic threshold bypass vulnerability Category: contrib Module: ntp Announced: 2016-01-14 Credits:...

RedHen CRM - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-002

The Redhen set of modules allows you to build a CRM features in a Drupal site. When rendering individual Contacts, this module does not properly filter the certain data prior to display. When rendering listing of notes or engagement scores, these modules do not properly filter certain data before...

Field Group - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-001

Field Group module enables you to group fields on entity forms and entity displays. When adding a HTML element as group, the user has the option to add custom HTML attributes on the group. Via this option, a malicious user can embed scripts within the page, resulting in a Cross-site Scripting XSS...

Cisco Prime Collaboration Assurance Default 'cmuser' Credentials (cisco-sa-20151209-pca)

The remote Cisco Prime Collaboration Assurance device is protected by default credentials. This is due to an undocumented account that is created during installation. A remote attacker can exploit this to log in to the system shell with the default 'cmuser' user account, and access the shell with...

Open Atrium - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-174

Open Atrium distribution enables you to create an intranet. Open Atrium Core module doesn't sufficiently sanitize some user supplied text, leading to a reflected Cross Site Scripting vulnerability XSS. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordanc...

Circutor PowerStudio SCADA 4.0.5 Privilege Escalation

Circutor PowerStudio SCADA 4.0.5 Unquoted Service Path Elevation Of Privilege Vendor: CIRCUTOR SA Product web page: http:/www.circutor.com Affected version: PowerStudio SCADA 4.0.5 and OPC Server 1.4.1 Summary: CIRCUTOR's Electrical Energy Efficiency software e3 is currently called PowerStudio...