OWASP DependencyCheck - A Software Composition Analysis Utility That Detects Publicly Disclosed Vulnerabilities In Application Dependencies

Dependency-Check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generate a report linking to the associate...

CVE-2018-6584

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

CVE-2018-6584

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

CVE-2018-5983

SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request...

CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

PT-2018-17268

Name of the Vulnerable Software and Affected Versions: Joomla! Advertisement Board version 3.1.0 Description: A SQL Injection issue exists in the Advertisement Board component for Joomla!. This issue can be exploited via a task=show rss categories&catname= request. Recommendations: For...

CVE-2018-5982: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=showrsscategories&catname= request...

CVE-2018-5983: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request...

PT-2018-17648

Name of the Vulnerable Software and Affected Versions DT Register version 3.2.7 Description A SQL Injection issue exists in the DT Register component for Joomla!, which can be exploited via a task=edit&id= request. Recommendations For DT Register version 3.2.7, update to a newer version that...

PT-2018-17275

Name of the Vulnerable Software and Affected Versions: ccNewsletter versions 2.x Description: A SQL Injection issue exists in the ccNewsletter component for Joomla, specifically via the id parameter in a "task=removeSubscriber" action. Recommendations: For ccNewsletter versions 2.x, update to a...

CVE-2018-6584: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

CVE-2018-5989: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

CVE-2018-6368: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

PT-2018-17510

Name of the Vulnerable Software and Affected Versions JomEstate PRO versions through 3.7 Description A SQL Injection issue exists via the id parameter in a "task=detailed" action, allowing potential exploitation. Recommendations For JomEstate PRO versions through 3.7, avoid using the id parameter...

PT-2018-17273

Name of the Vulnerable Software and Affected Versions: Joomla! Pinterest Clone Social Pinboard version 2.0 Description: A security issue exists in the Pinterest Clone Social Pinboard component for Joomla!, where an attacker can inject SQL code. This can be achieved through various parameters in...

PT-2018-17269

Name of the Vulnerable Software and Affected Versions: Joomla! JquickContact version 1.3.2.2.1 Description: A SQL Injection issue exists in the JquickContact component for Joomla!. The issue can be exploited via a task=refresh&sid= request. Recommendations: For JquickContact version 1.3.2.2.1,...

Description of the security update for Project Server 2013: February 13, 2018

Description of the security update for Project Server 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

CVE-2018-6508

Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the factertask or puppetconf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this...

CVE-2018-6508

Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the factertask or puppetconf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this...

DEBIAN-CVE-2018-6508

Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the factertask or puppetconf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this...