12397 matches found
CVE-2020-10681
The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1files to admin/moduleinterface.php...
CMS Made Simple Filemanager Remote Code Execution Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism , etc. Filemanager is one of the file management component . A remote...
Fedora: Security Advisory for ansible (FEDORA-2020-87f5e1e829)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...
Multiple Huawei products not adequately certified for vulnerability
The OSCA-550AX is a 55-inch smart screen launched by Huawei's brand Honor.The OSCA-550A is the first 55-inch terminal smart screen launched by Honor using Huawei's Hongmeng operating system. A security vulnerability exists in multiple Huawei products, which stems from the system's failure to...
CVE-2013-4395
Simple Machines Forum SMF through 2.0.5 has XSS...
Cross site scripting
Simple Machines Forum SMF through 2.0.5 has XSS...
CVE-2013-4395
Simple Machines Forum SMF through 2.0.5 has XSS...
[SECURITY] Fedora 31 Update: mingw-SDL2-2.0.10-1.fc31
Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...
CVE-2013-0192
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
2×4 Security
I had someone at the house recently, talking about physical security. We have all the usual stuff like alarms and CCTV, locks on the windows and doors but the aim of the exercise was to have someone who is familiar with attacks vectors physical security in this case, but the principal applies to...
OpenSMTPD Vulnerability
The CERT Coordination Center CERT/CC has released information on a vulnerability affecting OpenSMTPD. An attacker could exploit this vulnerability to take control of an affected system. OpenSMTPD is an open-source server-side implementation of the Simple Mail Transfer Protocol SMTP that is part o...
CVE-2020-8440
controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...
CVE-2019-16027
A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...
OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
Simple Machines Forum (SMF) < 2.0.16 Reverse Tabnabbing Vulnerability
Simple Machine Forum SMF is prone to a reverse tabnabbing vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Huawei EulerOS: Security Advisory for SDL (EulerOS-SA-2019-1469)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco IOS XR IS-IS Denial of Service Vulnerability
Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial-of-service vulnerability exists in the Intermediate System-to-Intermediate System IS-IS routing protocol function in Cisco IOS XR versions prior to 6.6.3, 7.0.2, 7.1.1, and 7.2.1. The vulnerabili...