Views Send - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-061

The Views Send module enables you to send mail to multiple users from a View. The module doesn't sufficiently filter potential user-supplied data when previewing the e-mail which can lead to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker mus...

kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

DokuWiki Cross-Site Request Forgery Vulnerability

DokuWiki is a German software developer Andreas Gohr developed a PHP-based Wiki engine , it is mainly used for small and medium-sized team and personal website knowledge base management , and provides version control , full-text search and permission control and other functions . A cross-site...

CVE-2016-3905

CORE/HDD/src/wlanhddmain.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449...

realtoractioncenter.com XSS vulnerability

Open Bug Bounty ID: OBB-185408 Description| Value ---|--- Affected Website:| realtoractioncenter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lupusresearch.org XSS vulnerability

Vulnerable URL: http://www.lupusresearch.org/news-and-events/lupus-news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check...

edgewood.org XSS vulnerability

Vulnerable URL: http://www.edgewood.org/news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:5...

The vulnerability of Microsoft Exchange Server servers allows attackers to gain access to protected information from the Outlook application.

The vulnerability of Microsoft Exchange Server servers is related to improper analysis of email messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the Outlook application by using the “Send As” command...

PT-2016-7194

Name of the Vulnerable Software and Affected Versions Irssi versions prior to 0.8.20 Description The issue allows remote attackers to cause a denial of service, resulting in heap corruption and a crash, through vectors involving the length of a string. This is due to a problem in the format send ...

CVE-2016-0138

Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...

CVE-2016-0138: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...

PT-2016-2768

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2016 Cumulative Update 2 Description The issue is related to the improper parsing of email messages by Microsoft Exchange Server, which can allow a remote attacker to obtain sensitive...

PT-2016-7126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7.5 Description The issue is related to the tcp check send head function in the Linux kernel, which does not properly maintain certain SACK state after a failed data copy. This allows local users to cause a...

PT-2016-6948

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8 Description The issue is related to a race condition in the ioctl send fib function, which can be exploited by local users to cause a denial of service, resulting in out-of-bounds access or a system crash. Th...

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-08-01 Vulnerability Laboratory ID VL-ID: ====================================...

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-07-31 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2016-4803

CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject...

PT-2016-6150

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.2 Description The issue concerns a CRLF injection vulnerability in the send email functionality. This allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject. Recommendations For...

kernel security and bug fix update

3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...