3863 matches found
CVE-2016-10397
Removed by vendor...
CVE-2016-10397
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:[email protected]/ and evil.example.com:[email protected]/ inputs to the parseurl...
www2.cdc.gov XSS vulnerability
Vulnerable URL: https://www2.cdc.gov/nip/isd/YCTS/mod1/courses/pneumo/10317.asp?studentid=1"...
GLPI SQL Injection Vulnerability
GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in GLPI version 0.90.4. A remote...
asu.edu XSS vulnerability
Vulnerable URL: http://www.asu.edu/courses/rel394ae/flashdetection.swf?flashContentURL=javascript:alert%27openbugbounty%27// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2557 VIP...
CVE-2017-7752
A use-after-free vulnerability during specific user interactions with the input method editor IME in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox 54, Firefox...
Trend Micro IWSVA ReportHandler DoCmd Command Injection
An authentication bypass vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to errors in handling specific strings contained in the request URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target...
Introducing InsightOps: A New Approach to IT Monitoring and Troubleshooting
Today we are announcing the general availability of a brand new solution: Rapid7 InsightOps. This latest addition to the Insight platform continues our mission to transform data into answers, giving you the confidence and control to act quickly. InsightOps is Rapid7s first IT-specific solution,...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2017-629)
This update for java-170-openjdk fixes the following issues : - Update to 2.6.10 - OpenJDK 7u141 bsc1034849 - Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-351...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - Lenovo Support US
No description provided...
F5 BIG-IP - TMM vulnerability CVE-2017-6137
Undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel TMM on specific platforms and configurations. CVE-2017-6137 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...
Moxa AWK-3131A Wireless Access Point Information Disclosure Vulnerability (CNVD-2017-07354)
Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa, China.Web Application is one of the web application modules. An information disclosure vulnerability exists in the Web Application feature of the Moxa AWK-3131A Wireless Access Point using firmware version 1.1. An attacker can...
USN-3291-2: Linux kernel vulnerabilities
USN-3291-1 fixed vulnerabilities in the generic Linux kernel. This update provides the corresponding updates for the Linux kernel built for specific processors and cloud environments. Dmitry Vyukov discovered that the generic SCSI sg subsystem in the Linux kernel contained a stack-based buffer...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - us
Lenovo Security Advisory: LEN-10149 Potential Impact: Local privilege escalation, cross-site request forgery, insecure connection, possibility to insert a forged code signing certificate Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8228, CVE-2016-8229, CVE-2016-8230,...
Microsoft's New Security Update Guides Get Mixed Reviews
Microsoft is receiving mixed reviews for its shift to delivering security update information via its newly launched Security Update Guides. The change was official in April, with Microsoft explaining it would allow system administrators to effectively pair specific patches with vulnerabilities, a...
HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...
CVE-2017-6137
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...