1229 matches found
CVE-2015-7519: Improper Input Validation
agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...
OpenMRS Reporting Module 0.9.7 - Remote Code Execution
Title: Unauthenticated remote code execution in OpenMRS Product: OpenMRS Vendor: OpenMRS Inc. Tested versions: See summary Status: Fixed by vendor Reported by: Brian D. Hysell Product description: OpenMRS is "the world's leading open source enterprise electronic medical record system platform."...
OpenMRS Reporting Module 0.9.7 - Remote Code Execution
OpenMRS Reporting Module 0.9.7 - Remote Code Execution Title: Unauthenticated remote code execution in OpenMRS Product: OpenMRS Vendor: OpenMRS Inc. Tested versions: See summary Status: Fixed by vendor Reported by: Brian D. Hysell Product description: OpenMRS is "the world's leading open source...
[SECURITY] Fedora 22 Update: thunderbird-38.4.0-1.fc22
Mozilla Thunderbird is a standalone mail and newsgroup client...
PT-2016-3800
Name of the Vulnerable Software and Affected Versions Phusion Passenger versions prior to 4.0.60 Phusion Passenger versions 5.0.x prior to 5.0.22 Description The issue allows remote attackers to spoof headers passed to applications by using an underscore character instead of a - dash character in...
Cumulative update for Windows 10 Version 1511: November 24, 2015
None None...
[SECURITY] Fedora 21 Update: thunderbird-38.1.0-1.fc21
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 22 Update: thunderbird-31.7.0-1.fc22
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 20 Update: thunderbird-31.7.0-1.fc20
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 21 Update: thunderbird-31.7.0-1.fc21
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 20 Update: thunderbird-31.6.0-1.fc20
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 20 Update: thunderbird-31.4.0-1.fc20
Mozilla Thunderbird is a standalone mail and newsgroup client...
KLA10452 Multiple vulnerabilities in VMware products
Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges or cause denial of service. Below is a complete list of vulnerabilities 1. Vectors related to file write can be exploited locally; 2. Improper input validation...
Microsoft-Office-2003-HomePro
Exploit: Microsoft Office 2003 Home/Pro 0day - Tested on XP SP1,2.3 Authors: b33f Ruben Boonen g11tch Chris Hodges import binascii filename = "evil.doc" ----------------------------------------------------------------------------------- File Structure...
Tape Inventory With: "Unknown media (possibly in use by another application)."
Challenge A tape inventory or catalog operation fails with the following error: Cannot inventory tape in Drive 1 Server: , Library: , Drive ID: TapeX. Unknown media possibly in use by another application. Cause This error is shown when Veeam Backup & Replication does not recognize the MTF header ...
Code injection
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
CVE-2014-0995
SAP NetWeaver Enqueue Server (Standalone Enqueue Server) is affected. Specifically, SAP NetWeaver 7.01 and 7.20 (and earlier) expose a denial-of-service vulnerability triggered by a crafted Trace Pattern with wildcards, causing uncontrolled recursion and a crash. The vulnerability affects the Sta...
CVE-2014-0995: Improper Input Validation
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
CVE-2014-8071
Multiple cross-site scripting XSS vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the 1 givenName, 2 familyName, 3 address1, or 4 address2 parameter to registrationapp/registerPatient.page; the 5 comment parameter to...