Apache Struts vulnerable to validation bypass in Getter method

Overview Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a validation bypass in Getter method vulnerability. JPCERT/CC Addendum Update: August 25, 2016...

XLware LibXL Denial of Service Vulnerability

XLware LibXL is a set of tools developed by the Ukrainian company XLware for direct manipulation of excel documents using the C/C++ language. A security vulnerability exists in XLware LibXL that originates from the device failing to validate driver domain input. An attacker could exploit the...

Zomato: Unvalidated redirect on user profile website

The user profile redirect request is not properly validated. The presence of parameter t which is being passed through the request is verified but same value can be reused to any unauthenticated or authenticated user to redirect them to any web site. Sample link is given below...

UBUNTU-CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

IBM UrbanCode Deploy Artifact Download Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

LMCMS Backend Arbitrary File Deletion Vulnerability

LMCMS Leming CMS system is a web content management system developed in Java language, developed by Beijing Leming Zhixin Technology Co., Ltd. and distributed under commercial license. LMCMS Leming CMS system management background full media library column under the file management provided in th...

McAfee Email Gateway 7.6.x < 7.6.404 Blocked Email Alert XSS (SB10153)

The version of McAfee Email Gateway MEG installed on the remote host is 7.6.x prior to 7.6.404. It is, therefore, affected by a cross-site scripting XSS vulnerability that is triggered when File Filtering is enabled with the action set to 'ESERVICES:REPLACE'. This is due to a failure to validate...

Joyent Node.js moment denial of service vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A denial of service vulnerability exists in Joyent Node.js moment due to a failure of the moment.duration function to check input, allowing remote attackers to submit special regular expressions for denial...

Apple QuickTime < 7.7.8 Multiple Vulnerabilities

Binary data 9305.prm...

Moneybird: Open Redirect vulnerability in moneybird.com

Reporter found an unvalidated redirect in our login procedure. We have added validations to make sure the redirection always points to our own software...

Apache OpenMeetings FileService Arbitrary File Read Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. An Arbitrary File Read Exposure...

C2Box 4.0.0(r19171) Validation Bypass

Title: Validation Bypass in C2Box application allows user to input negative value Author: Harish Ramadoss Vendor: boxautomationB.A.S Product: C2Box Version: All versions below 4.0.0r19171 Tested Version: Version 4.0.0r19171 Severity: Medium CVE Reference: 2015-4626 About the Product: B.A.S C2Box...

Uber: Reflected XSS via Unvalidated / Open Redirect in uber.com

Hello, To reproduce this issue, visit this URL: https://www.uber.com/en//example.com/ This URL will redirect at example.com...

DEBIAN-CVE-2016-2528

The dissectnhdrextopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

python-django: Information leak through date template filter

An information-exposure flaw was found in the Django date filter. If an application allowed users to provide non-validated date formats, a malicious end user could expose application-settings data by providing the relevant applications-settings key instead of a valid date format...

python-django: Information leak through date template filter

An information-exposure flaw was found in the Django date filter. If an application allowed users to provide non-validated date formats, a malicious end user could expose application-settings data by providing the relevant applications-settings key instead of a valid date format...

Wireshark UMTS FP Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. Wireshark version 1.12.x prior to 1.12.9, the function dissecthsdschchannelinfo in epan/dissectors/packet-umtsfp.c in the UMTS FP parser does not validate the number of PDUs, and by constructing a packet, a remote attacker can exploit this...

DEBIAN-CVE-2015-8740

The dissecttds7colmetadatatoken function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...

EasyCafe Server <= 2.2.14 Remote File Read Vulnerability - Active Check

EasyCafe Server is prone to a remote file read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba Bypass Access Privilege Vulnerability

Samba is a set of programs that implement the SMB Server Messages Block protocol, cross-platform file sharing and print sharing services. An access privilege bypass vulnerability exists in the shadowcopy2getshadowcopydata function in the /vfsshadowcopy2.c module in Samba versions 4.x before 4.1.2...