729 matches found
ALPINE-CVE-2016-9855
An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...
DEBIAN-CVE-2016-9855
An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
DEBIAN-CVE-2016-6187
The apparmorsetprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook...
Tenable Network Security Tenable Nessus Mac OS X Scanning Component Elevation of Privilege Vulnerability
Tenable Network Security Tenable Nessus is an open source vulnerability scanner from Tenable Network Security, USA. An elevation of privilege vulnerability exists in the Mac OS X Scanning component of Tenable Network Security Tenable Nessus versions 5.x and earlier and 6.5.4 and earlier, which ca...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mesa-6.5.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
PT-2013-1885 · Openssl +2 · Openssl +2
Name of the Vulnerable Software and Affected Versions: Qt versions prior to 4.6.5 Qt versions 4.7.x prior to 4.7.6 Qt versions 4.8.x prior to 4.8.5 Description: The issue arises from the QSslSocket::sslErrors function, which, when used with certain versions of openSSL, may read memory from an...
CVE-2012-6555
creationtimestamp| type| source ---|---|--- 2012-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18908...
Lotus Domino cross-site scripting vulnerability
Overview IBM Lotus Domino contains a cross-site scripting vulnerability. IBM Lotus Domino is server software for Lotus Notes, groupware from IBM. Lotus Domino contains a cross-site scripting vulnerability. Impact An attacker could execute an arbitrary script on the web browser of a user who...