1067 matches found
JVN#56132776: Multiple vulnerabilities in Jubatus
Jubatus provided by Jubatus Community contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0524 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 5.6 CVSS v2| AV:N/AC:M/Au:N/C:P/I:P/A:P| Base Score: 6.8 Directory...
OS Property, 3.12.8, SQL Injection
OS Property from Joomdonation.com, 3.12.8 and previous, SQL Injection resolution: update to 3.12.9 note that previous security release 3.12.8 did not completely fix the issue update notice: https://www.joomdonation.com/forum/os-property/61368-os-property-3-12-9-released-security-issue-fixed.html...
DSA-4124-1 lucene-solr - security update
Bulletin has no description...
DSA-4126-1 xmltooling - security update
Bulletin has no description...
DLA-1289-1 irssi - security update
Bulletin has no description...
DLA-1287-1 zziplib - security update
Bulletin has no description...
DLA-1286-1 quagga - security update
Bulletin has no description...
DSA-4113-1 libvorbis - security update
Bulletin has no description...
DLA-1278-1 librsvg - security update
Bulletin has no description...
DLA-1275-1 uwsgi - security update
Bulletin has no description...
Multiple vulnerabilities in epg search result viewer(kkcald)
Overview epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Cross-site request forgery CWE-352 - CVE-2018-0509 Buffer overflow CWE-121 - CVE-2018-0510 Kusano Kazuhiko reported this vulnerability to IPA...
JVN#91393903: Multiple vulnerabilities in epg search result viewer(kkcald)
epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/AU:N/C:N/I:P/A:N| Base Score:...
WordPress Splashing Images plugin <=2.1 - Authenticated PHP Object Injection vulnerability
Authenticated PHP Object Injection vulnerability found by Nicolas Buzy-Debat in WordPress Splashing Images plugin versions =2.1. PHP Object Injection attack via crafted serialized data in the 'session' HTTP GET parameter to wp-admin/upload.php. Solution Update the WordPress Splashing Images plugi...
DSA-4097-1 poppler - security update
Bulletin has no description...
DLA-1250-1 mysql-5.5 - security update
Bulletin has no description...
DLA-1248-1 libgd2 - security update
Bulletin has no description...
DSA-4091-1 mysql-5.5 - security update
Bulletin has no description...
DLA-1246-1 transmission - security update
Bulletin has no description...