946 matches found
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 2 (VA MN: 7.0.2-403, VA Agent: 7.0.2-189)
This hotfix for Virtuozzo Automator 7.0.2 provides stability and usability bug fixes. Vulnerability id: PVA-37045 The Management Node did not recognize bonded network during VLAN creation. Vulnerability id: PVA-37041 Could not create virtual network for a VLAN created by the Virtuozzo installer...
RubyGems: No limit of summary length allows Denail of Service
Currently, there is no limit for summary length. I think, pushing a gem whose summary is huge, will make gem search unavailable. This is not Arbitrary Code Execution, but really easy to attack. According to CVSS v3.0 Calculator, the severity is High 7.5. How to attack 1 An attacker creates a gem...
Microsoft Releases June 2017 Security Updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system. US-CERT encourages users and administrators to review Microsoft's June 2017 Security Update Summary and Deployment Informatio...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting attacks. These attacks are possible through the course summary filter on the Add a new course page by passing an attribute to it. Note: This is not going to be fixed by the Moodle team...
anebooks.com XSS vulnerability
Vulnerable URL: http://www.anebooks.com/summary-booklist.asp?from=search==91=0====1%22%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirmOPENBUGBOUNTY%20//=0==3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XS...
Moodle cross-site scripting vulnerability (CNVD-2017-04602)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the Course summary filter on the 'Add a...
Design/Logic Flaw
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
CVE-2017-7298
CVE-2017-7298 affects Moodle 3.2.2+ via a cross-site scripting vulnerability in the Course summary filter on the Add a new course page. The issue is triggered by crafted SVG attributes, enabling potential injection. Public details in connected documents reiterate the XSS in Moodle 3.2.2+ but do n...
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
CVE-2017-7298: Improper Neutralization of Input During Web Page Generation
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...
PT-2017-17615 · Cmsms · Cms Made Simple
Name of the Vulnerable Software and Affected Versions: CMS Made Simple CMSMS version 2.1.6 Description: A security issue exists in the "Content--News--Add Article" feature of the software, where an attacker can exploit the m1 summary parameter to conduct a cross-site scripting XSS attack. This...
Fedora 24 : netpbm (2017-fa4e441e03)
Security fix for CVE-2017-2586, CVE-2017-2587 and CVE-2017-5849, ---- Add license information file copyrightsummary ---- New version of netpbm is available 10.77.00 ---- add missing directives about bundled libraries jasper and jbigkit ---- New version of netpbm is available 10.76.00 Note that...
CVE-2017-3326
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: Role Summary. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access...
CVE-2017-3326
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: Role Summary. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access...
CVE-2017-3326
CVE-2017-3326 affects Oracle E-Business Suite, Oracle Common Applications component (Role Summary) across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications, wi...
CVE-2017-3326: Undefined Security Weakness
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: Role Summary. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access...