Mahara < 16.10.9, < 17.04.7, < 17.10.4 XSS Vulnerability

Mahara is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara";...

Critical: exim

Issue Overview: Buffer overflow in b64decode function, possibly leading to remote code execution: An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

DRUPAL-CONTRIB-2018-015

This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The module doesn't sufficiently associate cacheability metadata in certain situations thereby causing an access bypass vulnerability. This vulnerability is mitigated b...

phpMyAdmin Multiple Security Vulnerabilities (Apr 2013) - Linux

phpMyAdmin is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...

Palo Alto PAN-OS Information Disclosure Vulnerability (PAN-SA-2017-0013)

A vulnerability exists in the Management Web Interface of Palo Alto PAN-OS, that could allow for information disclosure. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

samba security and bug fix update

3.6.23-41.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-41 - resolves: 1413672 - Auth regression after secret changed 3.6.23-40 - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 3.6.23-39 - resolves: 1297805 - Fix issues with printer unpublishing...

Loading DNS zones fails on a Windows Server 2008 R2-based DNS server

Loading DNS zones fails on a Windows Server 2008 R2-based DNS server This article describes an issue in which a Windows Server 2008 R2 Service Pack 1 SP1-based DNS server that has Active Directory–integrated zones fails to load DNS zones. An update is available to fix this issue. Before you insta...

Wbengine.exe crashes when you run a backup on a GPT formatted drive in Windows Server 2012

Wbengine.exe crashes when you run a backup on a GPT formatted drive in Windows Server 2012 This article describes an issue that occurs when a backup is taken on a GUID partition table GPT formatted drive in Windows Server 2012. You can fix this issue by using the update in this article. How to ge...

Cluster nodes or VMs go offline when they are using VMQ capable NICs on a Windows Server 2012 R2 host

Cluster nodes or VMs go offline when they are using VMQ capable NICs on a Windows Server 2012 R2 host This article describes an issue in which all virtual machines VM go into failed state on a Windows Server 2012 R2 host and may not be migrated automatically to other cluster nodes. An update is...

Security update for quagga (important)

This update for quagga fixes the following issue: - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258...

MS15-0 3 4 IIS 7.0 HTTP.sys a remote code execution vulnerability(CVE-2 0 1 5-1 6 3 5) POC-vulnerability warning-the black bar safety net

Detection script: Python----beebeeto http://www.beebeeto.com/pdb/poc-2015-0081/ !/ usr/bin/env python coding=utf-8 """ Site: http://www.beebeeto.com/ Framework: https://github.com/n0tr00t/Beebeeto-framework """ import socket import random import urlparse from baseframe import BaseFrame class...

RHEL 7 : java-1.7.0-oracle (RHSA-2016:1476)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1476 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...

SUSE-SU-2016:1366-1 Recommended udpate for SUSE Manager Client Tools

This update for SUSE Manager Client Tools provides the following fixes and enhancements: rhnlib: - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo: - Fix file permissions bsc970550...

mercurial security update

2.6.2-6 - fix previous patch for CVE-2016-3069 2.6.2-5 - Fix CVE-2016-3068 and CVE-2016-3069...

Mandriva Linux Security Advisory : ppp (MDVSA-2015:222)

Updated ppp packages fix security vulnerability : Emanuele Rocca discovered that ppp was subject to a buffer overflow when communicating with a RADIUS server. This would allow unauthenticated users to cause a denial-of-service by crashing the daemon CVE-2015-3310. %NASLMINLEVEL 70300 C Tenable...

WooThemes WooFramework 4.5.1 Cross Site Scripting

------------------------------------------------------------------------------ WooThemes WooFramework 4.5.1 Authenicated Cross Site Scripting XSS ------------------------------------------------------------------------------ - Vulnerability Description:...

WordPress Plugin SP Project & Document Manager 2.5.3 - Blind SQL Injection

Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage: http://smartypantsplugins.com Software Link:...

USN-2458-3 firefox regression

USN-2458-1 fixed vulnerabilities in Firefox. This update introduced a regression which could make websites that use CSP fail to load under some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Christian Holler, Patrick McManus, Christoph...

WordPress EasyCart Information Disclosure Vulnerability

WordPress EasyCart is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Buro Theme - Remote Code Execution

There is a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...