237 matches found
DEBIAN-CVE-2017-16651
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid...
HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...
SA112 : Linux Kernel Keyring Privilege Escalation
SUMMARY Blue Coat products that include affected versions of the Linux kernel and provide means for executing arbitrary code are susceptible to a privilege escalation vulnerability. A malicious local unprivileged user can exploit this vulnerability to escalate their privileges on the system or...
UBUNTU-CVE-2015-0317
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0319...
UBUNTU-CVE-2015-0408
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...
DEBIAN-CVE-2014-3137
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; semi-colon and a Content-Type that would not be accepted, as...
CVE-2012-6447
Concretely, CVE-2012-6447 affects Splunk Web in Splunk 5.0.0–5.0.2, where a cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue is mitigated by upgrading to a fixed release (e.g., Splunk 5.0.3 or later) as indicated b...
wordpress_fingerprint
This plugin finds the version of a WordPress installation by fingerprinting it. It first checks whether or not the version is in the index header and then it checks for the "real version" through the existance of files that are only present in specific versions. Plugin type Crawl Options This...
CVE-2013-3341
Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...
CVE-2012-1814
Emerson DeltaV family is affected by CVE-2012-1814: XSS in DeltaV and DeltaV Workstations versions 9.3.1, 10.3.1, 11.3, 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability allows remote script injection via unspecified web vectors in the affected web interfaces. Exploitati...
tomcat: large number of parameters DoS
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service CPU consumption via a request that contains many parameters and parameter values, a different vulnerability...
tomcat: security manager restrictions bypass
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
Fedora 9 : net-snmp-5.4.1-19.fc9 (2008-9367)
Tue Jul 22 2008 Jan Safranek 5.4.1-19 - fix perl SNMP::Session::set 452131 - support interface names longer than 8 characters 468045 - explicitly require the right version and release of net-snmp and net-snmp-libs - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-18 - explicitly require...
vBulletin <= 3.0.4 ""forumdisplay.php"" Code Execution (part 2)
No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
Exploit for unknown platform in category remote exploits ============================================================== MS Windows JPEG GDI+ Overflow Administrator Exploit MS04-028 ============================================================== !/bin/sh MS04-028 Exploit PoC II with Shellcode:...
