MGASA-2015-0328 Updated drupal packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files CVE-2015-6658. SQL injection vulnerability in the SQL comment filtering system in the Database API i...

SQL Injection Vulnerability in Core Business System of BaoLin Financial Technology Intermediary

Guangdong Bao Lian Financial Technology Co., Ltd. is an application software system integrator and it application platform operator dedicated to the informatization of the insurance industry. The intermediary core business system is one of the application systems of the company. A SQL injection...

Fedora 21 : xfsprogs-3.2.2-2.fc21 (2015-12406)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

Adobe LiveCycle Data Services Information Disclosure Vulnerability

Adobe LiveCycle Data Services is the United States Odo than Adobe company's set of application servers deployed on and integrated with RIA applications and J2EE and other enterprise applications server software. The software provides remote procedure call RPC services, messaging services and data...

Joomla! Helpdesk Pro Plugin Information Disclosure Vulnerability

Joomla! is a well-known content management system in foreign countries. Joomla! is a software system developed using the PHP language coupled with a MySQL database, which can be implemented on a variety of different platforms such as Linux, Windows, MacOSX and so on. An information disclosure...

KLA10629 Multiple vulnerabilities in Oracle Java SE

An unspecified vulnerabilities were found in Oracle Java SE. By exploiting these vulnerabilities malicious users can cause denial of service, affect integrity and obtain sensitive information. These vulnerabilities can be exploited remotely via vectors related to 2D, CORBA, JMX, Libraries, RMI,...

Adobe Flash Player and AIR Cross-Domain Information Disclosure Vulnerability (CNVD-2015-04565)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR have implementation...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flowimage_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flowimagepage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flowform_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flowformpage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Page Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. A SQL injection vulnerability exists in the page paramete...

SQL Injection Vulnerability in FileId Parameter of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. An SQL injection vulnerability exists in the FileId...

SQL Injection Vulnerability in the type parameter of Haitian OA System/ZhuanTi/DocMain.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

GNOME Epiphany 'DNSSoup.cpp' Information Disclosure Vulnerability

GNOME Epiphany is a browser product for the GNOME desktop. The product provides paging, cookie management, pop-up ad control, and other features. An information disclosure vulnerability exists in GNOME Epiphany 'DNSSoup.cpp'. The vulnerability allows attackers to obtain sensitive information...

PT-2017-6631 · Red Hat +1 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the kernel-invoked coredump processor in ABRT, which fails to properly check file ownership before writing core dumps. This allows local users with write permissions to the...

PYSEC-2015-3

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file...

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read and system crash via a crafted packet...

Tesla Motors Starts Bug Bounty--But Not For Its Cars

Tesla Motors has started a bug bounty program that will pay researchers up to $1,000 for disclosing vulnerabilities. However, the rewards don’t apply to bugs found in the company’s vehicles. The program’s scope is quite narrow, with only the main teslamotors.com domain and other domains owned by...

SQL Injection Vulnerability in id Parameter of E-procurement System of Yizitong

Yicai Tong has been committed to enterprise procurement informationization and procurement consulting, providing in-depth solutions in the direction of procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain, and industrialize...

IBM Security SiteProtector System Local Information Disclosure Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. IBM Security SiteProtector System local information disclosure vulnerability. This vulnerability could be exploited by an attacker to obta...

SQL Injection Vulnerability in the Collaboration Management System/c6/Jhsoft.Web.login/NewCList.aspx Page of Beijing Jinhe Network Co.

Beijing Jinhe Network Co., Ltd. collaborative management system, according to the precise management ideas guided by the 6C management concept design, the Internet technology, computer technology, Luan Runfeng's management concepts, Chinese culture, the four are closely integrated, the core of...