8522 matches found
PT-2018-17598
Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 2017.3.3 Description The issue is related to a remote execution bug that occurs when a specially crafted string is passed into the facter task or puppet conf tasks. This bug only affects tasks in the affecte...
Joomla! JEXTN Membership SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JEXTN Membership component is used in a set of e-commerce components. A SQL injection vulnerability exists in version 3.1.0 of...
CVE-2018-6604: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...
PT-2018-17663
Name of the Vulnerable Software and Affected Versions Joomla! component Zh YandexMap version 6.2.1.0 Description The issue exists due to SQL Injection in the Zh YandexMap component for Joomla!. This occurs via the id parameter in a "task=getPlacemarkDetails" request. Recommendations For version...
CVE-2018-6610: Exposure of Sensitive Information to an Unauthorized Actor
Information Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId request...
PT-2018-17668
Name of the Vulnerable Software and Affected Versions jLike version 1.0 Description The issue allows for information leakage via a task=getUserByCommentId request. Recommendations For jLike version 1.0, consider restricting access to the task=getUserByCommentId request until a patch is available...
CVE-2018-6577: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
CVE-2018-6578: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
PT-2018-17644
Name of the Vulnerable Software and Affected Versions Jimtawl versions 2.1.6 through 2.2.5 Description The issue allows for arbitrary file upload in the Jimtawl component for Joomla. This can be achieved through a request to the "view=upload&task=upload&pop=true&tmpl=component" endpoint...
Task Rabbit Clone SQL Injection Vulnerability
Task Rabbit Clone is a set of PHP-based scripts for online service marketplace websites. A SQL injection vulnerability exists in Task Rabbit Clone version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the singleblog.php file...
CVE-2018-6398
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
PT-2018-17533
Name of the Vulnerable Software and Affected Versions Joomla! CP Event Calendar version 3.0.1 Description A SQL Injection issue exists in the CP Event Calendar component for Joomla!. This issue is exploitable via the id parameter in a "task=load" action. Recommendations For version 3.0.1, avoid...
CVE-2018-6398: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2018-03335)
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...
QuickBackup in vCenter plugin fails on Cisco Hyperflex Snapshot due to pending task
QuickBackup for a VM that resides on Cisco HyperFlex using the Veeam Plugin for vCenter always fails. The following output can be found in the task log:timestamp Info CiscoHXX.X.X...
CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2018-03332)
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...
CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2018-03333)
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...
CVE-2018-6363
SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...
