CVE-2015-0700: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.50.46.5 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924...

PT-2015-4822

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server Solution Engine versions prior to 5.50.46.5 Description A cross-site request forgery CSRF issue exists in the Dashboard page within the monitoring-and-report section, allowing remote attackers to hijack the...

WordPress WP-Mon Plugin - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Vulnerable file: http://localhost/wordpress/wp-content/plugins/wp-mon/assets/download.php Solution Update the plugin...

CVE-2015-2114

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors...

Code injection

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors...

CVE-2015-2114

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors...

CVE-2015-2114

CVE-2015-2114 affects HP Support Solution Framework on Windows prior to 11.51.0049, where a vulnerability could allow a remote attacker to have the system download and execute an arbitrary program on a client machine via unspecified vectors. The NVD description states remote code execution with a...

CVE-2015-2114: Undefined Security Weakness

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors...

WordPress Miwo FTP Plugin 1.0.5 - CSRF Arbitrary File Deletion Exploit

Miwo FTP plugin's "post" parameter is prone to CSRF Arbitrary File Deletion Exploit vulnerability. Because of "seselitems" parameter is not properly sanitised, the files can be deleted with the permissions of the web server. Solution Update the plugin...

Unspecified Remote Information Disclosure Vulnerability in HP Support Solution Framework

HP Support Solution Framework is a set of common software interfaces provided by HP Software Framework An unspecified remote information disclosure vulnerability exists in HP Support Solution Framework. This vulnerability could be exploited by an attacker to obtain sensitive information or conduc...

MS15-034: Vulnerability in HTTP.sys could allow remote code execution: April 14, 2015

None None...

PT-2015-5619

Name of the Vulnerable Software and Affected Versions HP Support Solution Framework versions prior to 11.51.0049 Description The issue allows remote attackers to download and execute an arbitrary program onto a client machine. Recommendations For versions prior to 11.51.0049, update to version...

Mandriva Linux Security Advisory : ntp (MDVSA-2015:202)

Multiple vulnerabilities has been found and corrected in ntp : The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by...

Safari Cross-Domain Hijacking

OVERVIEW ========== The 4/8/2015 security updates from Apple included a patch for a Safari cross-domain vulnerability. An attacker could create web content which, when viewed by a target user, bypasses some of the normal cross-domain restrictions to access or modify HTTP cookies belonging to any...

SAP JAVA AS icman - DoS vulnerability

Application: SAP JAVA AS Versions Affected: SAP JAVA AS 7.2 – 7.4 Vendor URL: SAP Bugs: Denial of Service Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 14.03.2016 Reference: SAP Security Note 2256185 Author: Dmitry Yudin ERPScan @ret5et Vulnerability Information Class:...

DamiCMS any control of voting number of votes-vulnerability warning-the black bar safety net

DamiCMS any control of voting number of votes Vote the key code is as follows. foreach$POST'vote' as $v vardump$v; $v = strreplace"\n","",$v; $s = explode"=",$v; vardump$s; $data'vote' = strreplace$v,$s0."=". intval$s1 + 1,$data'vote'; vardump$data; if$vote-where'id='. intval$POST'id'-save$data...

F5 Networks BIG-IP : Python vulnerability (K16398)

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. CVE-2006-4980 Impact An attacker may be able to...

Fedora Update for seamonkey FEDORA-2015-4879

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: freeipa-4.1.4-1.fc21

IPA is an integrated solution to provide centrally managed Identity machin e, user, virtual machines, groups, authentication credentials, Policy configuration settings, access control information and Audit events, logs, analysis thereof...

Fedora Update for moodle FEDORA-2015-4530

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...