CVE-2017-6045

Summary: CVE-2017-6045 is an information disclosure vulnerability in Trihedral VTScada prior to version 11.2.26. The issue arises from files being exposed within the web server to unauthenticated users, potentially revealing sensitive configuration data. Affected product/version: VTScada before 1...

SurgeNews User Credentials

This module exploits a vulnerability in the WebNews web interface of SurgeNews on TCP ports 9080 and 8119 which allows unauthenticated users to download arbitrary files from the software root directory; including the user database, configuration files and log files. This module extracts the...

Information Disclosure

Moodle is vulnerable to information disclosure. This is because global search does not respect the Force login for profiles setting and displays user names to unauthenticated users...

VICIdial user_authorization Unauthenticated Command Execution

This module exploits a vulnerability in VICIdial versions 2.9 RC 1 to 2.13 RC1 which allows unauthenticated users to execute arbitrary operating system commands as the web server user if password encryption is enabled disabled by default. When password encryption is enabled the user's password...

Confluence 6.0.x Information Disclosure Vulnerability

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the content of all blogs and pages inside...

Denial of service

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves,...

CVE-2017-7581

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed...

CVE-2017-7581

The CVE concerns TYPO3’s News module (NewsController.php) vulnerability CVE-2017-7581 affecting version 5.3.2 and earlier. It enables unauthenticated SQL injection through vectors involving overwriteDemand for order and OrderByAllowed, allowing arbitrary SQL execution. Connected materials referen...

CVE-2017-7581

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

Design/Logic Flaw

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2017-7394

In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames...

CVE-2016-9469

Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix...

CVE-2017-2643

In Moodle 3.2.x, global search displays user names for unauthenticated users...

Code injection

In Moodle 3.2.x, global search displays user names for unauthenticated users...

CVE-2017-2643

In Moodle 3.2.x, global search displays user names for unauthenticated users...

CVE-2017-2643

In Moodle 3.2.x, global search displays user names for unauthenticated users...

CVE-2017-2643

In Moodle 3.2.x, global search displays user names for unauthenticated users...