3381 matches found
DokuWiki Cross-Site Request Forgery Vulnerability
DokuWiki is a German software developer Andreas Gohr developed a PHP-based Wiki engine , it is mainly used for small and medium-sized team and personal website knowledge base management , and provides version control , full-text search and permission control and other functions . A cross-site...
CVE-2016-3905
CORE/HDD/src/wlanhddmain.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449...
realtoractioncenter.com XSS vulnerability
Open Bug Bounty ID: OBB-185408 Description| Value ---|--- Affected Website:| realtoractioncenter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lupusresearch.org XSS vulnerability
Vulnerable URL: http://www.lupusresearch.org/news-and-events/lupus-news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check...
edgewood.org XSS vulnerability
Vulnerable URL: http://www.edgewood.org/news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:5...
The vulnerability of Microsoft Exchange Server servers allows attackers to gain access to protected information from the Outlook application.
The vulnerability of Microsoft Exchange Server servers is related to improper analysis of email messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the Outlook application by using the “Send As” command...
CVE-2016-0138
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
CVE-2016-0138: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities
Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...
Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities
Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-07-31 Vulnerability Laboratory ID VL-ID: ====================================...
kernel security and bug fix update
3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...
Secure Mail unable to send large files.
Having problems using Secure Mail client in sending large files greater than 7 to 10MB Verifyed the WM Logs and could see the following error , where by the mail is send to the Outbox ERROR 2Response contained WBXML content with contentLength=15 for activeSyncCommand=SendMail INFO 4SendMail -...
Joyent Node.js send ROOT directory discovery vulnerability
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js send allows remote attackers to submit a special request to discover the root directory...
Send Anywhere (File Transfer) - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Send Anywhere File Transfer published at the 'play' market has multiple vulnerabilities...
Ipswitch MOVEit DMZ and MOVEit Mobile File Read Vulnerabilities
Ipswitch MOVEit is an automated file transfer system from Ipswitch USA. DMZ and Mobile are among the versions. Ipswitch MOVEit DMZ and MOVEit Mobile have a security vulnerability in the 'Send as attachment' function due to the mobile/sendMsg URI failing to adequately filter the ' serverFileIds'...
PT-2017-7491 · Send +1 · Send +1
Name of the Vulnerable Software and Affected Versions: send versions prior to 0.11.1 Description: The issue allows attackers to obtain the root path via unspecified vectors, potentially enabling them to enumerate paths on the server filesystem. Recommendations: For versions prior to 0.11.1, updat...
astana.gov.kz XSS vulnerability
Vulnerable URL: http://astana.gov.kz/kk/resetting/send-email Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Chec...
DEBIAN-CVE-2015-8476
Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an 1 email address to the validateAddress function in class.phpmailer.php or 2 SMTP command to the sendCommand function in class.smtp.php, a different...
D-Link DIR-866L 'HNAP' and 'Send Email' Function Buffer Overflow Vulnerability
D-Link DIR-866L is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-866L. An attacker can exploit this vulnerability to execute arbitrary code in an affected application, which may also result in a denial of service...
