CVE-2016-1499

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service CPU consumption via the force parameter to index.php/apps/files/ajax/scan.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL...

http-vuln-cve2013-6786 NSE Script

Detects a URL redirection and reflected XSS vulnerability in Allegro RomPager Web server. The vulnerability has been assigned CVE-2013-6786. The check is general enough script tag injection via Referer header that some other software may be vulnerable in the same way. See also:...

Vulnerability of the microprogramming software used in Micrologix 1100 and 1400 programmable logic controllers, allowing intruders to inject arbitrary web or HTML code

The vulnerability of Micrologix 1100 and 1400 microprogrammed logic controllers’ web servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server sub-component: The InnoDB database management system in MySQL is vulnerable to errors in its code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MySQL database management system allows a hacker to perform unauthorized data reading.

Vulnerability of the Server sub-component: The types of the MySQL database management system are related to errors in the code. Exploiting this vulnerability allows a malicious actor to perform unauthorized data reading remotely...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server subcomponent: The partitioning of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792...

GLPI 0.85.5 - Arbitrary File Upload / Filter Bypass / Remote Code Execution

Exploit Title: GLPI 0.85.5 RCE through file upload filter bypass Date: September 7th, 2015 Exploit Author: Raffaele Forte Vendor Homepage: http://www.glpi-project.org/ Software Link: https://forge.glpi-project.org/attachments/download/2093/glpi-0.85.5.tar.gz Version: GLPI 0.85.5 Tested on: CentOS...

JVN#08535069: MATCHA SNS vulnerable to code injection

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Impact An unauthenticated attacker who can execute the installer may execute arbitrary PHP code on the server where...

McAfee Threat Intelligence Exchange Secondary Server Information Disclosure Vulnerability

McAfee Threat Intelligence Exchange TIE the United States McAfee McAfee company's set of unified threat defense system to provide security recovery and infection defense capabilities. The system provides comprehensive threat intelligence awareness, instant understanding of the trails of advanced...

JSPMySQL Administrador Cross-Site Scripting Vulnerability

JSPMySQL Administrador is a JSP technology Web server MySQL database remote management tools . JSP/MySQL Administrador Web 1 in the implementation of a cross-site scripting vulnerability , remote attackers through the sys/sys/listaBD2.jsp bd parameter , the use of this vulnerability can be inject...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows attackers to carry out attacks related to creating multiple registration requests.

The vulnerability of the Mobile and Remote Access extensions of the microprogramming software for Cisco TelePresence Video Communication Servers exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to carry out attacks involving the creation of...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges...

I'm how to find Google on the server LFI vulnerability-vulnerability warning-the black bar safety net

This article describes how to use the local file inclusion vulnerability to read the the Google a server on any file. Vulnerability exists in Google's Feedburner, in the submission of the vulnerability, Google's security team quickly fixed the vulnerability. FeedBurner is what Wikipedia on the...

The vulnerability of the MySQL database management system allows a hacker to compromise the accessibility of data.

The vulnerability of the Server sub-component in the Security section of the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of data...

Code injection

Mobile Devices aka MDI C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges...