6483 matches found
Samba 3.0.0 <= 3.0.25rc3 MS-RPC Remote Shell Command Execution Vulnerability - Version Check
Samba is prone to a vulnerability that allows attackers to execute arbitrary shell commands because the software fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
IBM BigFix (Formerly Tivoli Endpoint Manager) Multiple Vulnerabilities (Oct 2016)
IBM BigFix Formerly Tivoli Endpoint Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cisco Cloud Services Platform 2.x < 2.1.0 Multiple Vulnerabilities
According to its self-reported version number, the remote Cisco Cloud Services Platform CSP device is 2.x prior to 2.1.0. It is, therefore, affected by the following vulnerabilities : - A command injection vulnerability exists in the web-based GUI due to improper sanitization of user-supplied...
MS16-125: Security Update for Windows Diagnostic Hub (3193229)
The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Windows Diagnostics Hub Standard Collector service due to improper sanitization of user-supplied input. A local attacker can exploit this, via a specially crafted...
Oracle MySQL 5.5.x < 5.5.50 Multiple Vulnerabilities
Binary data 9608.prm...
WordPress < 4.6.1 Multiple Vulnerabilities
According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability XSS exists when handling file names of uploaded images due to improper...
Apple iOS < 10.0.1 Kernel Memory Information Disclosure (Trident)
Binary data appleios1001check.nbin...
WordPress Mail Masta Plugin 1.0 - local file inclusion
This file contains the vulnerability allows an attacker to include a file,usually using a“dynamic file include”mechanisms in the target application. The vulnerability occurs due to the use of user-supplied input without proper validation. Source file: /inc/campaign/countofsend.php Line 4:...
IBM WebSphere Portal XSS Vulnerability
IBM WebSphere Portal is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress Plugin Mail Masta 1.0 - Local File Inclusion
Date: 23-8-2016 + Autor Guillermo Garcia Marcos + Vendor: https://downloads.wordpress.org/plugin/mail-masta.zip + Title: Mail Masta WP Local File Inclusion + info: Local File Inclusion The File Inclusion vulnerability allows an attacker to include a file, usually exploiting a "dynamic file...
Trend Micro Control Manager AdHocQuery_CustomProfiles SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within AdHocQueryCustomProfiles.aspx. The issue lies in the failure to sanitize...
Dell OpenManage Server Administrator 8.2 ViewFile Directory Traversal
The version of Dell OpenManage Server Administrator OMSA running on the remote web server is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input to the 'file' parameter in the /ViewFile script. An authenticated, remote attacker who can access an...
Iris ID IrisAccess ICU 7000-2 - Multiple Vulnerabilities
Iris ID IrisAccess ICU 7000-2 Multiple XSS and CSRF Vulnerabilities Vendor: Iris ID, Inc. Product web page: http://www.irisid.com Affected version: ICU Software: 1.00.08 ICU OS: 1.3.8 ICU File system: 1.3.8 EIF Firmware Channel 1: 1.9 EIF Firmware Channel 2: 1.9 Iris TwoPi: 1.4.5 Summary: The ICU...
Mozilla Firefox ESR 45.x < 45.1 Multiple Vulnerabilities
Binary data 9379.prm...
SolarWinds Storage Resource Monitor Profiler Server RulesMetaData addNewRule SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RulesMetaData's addNewRule method which is reachable through t...
Cisco Prime Collaboration Deployment SQL Injection Vulnerability
A vulnerability in the interface of the Cisco Prime Collaboration Deployment SQL database could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation for user-supplied input in...
cURL < 7.48.0 Integer Overflow Issue
Binary data 800142.prm...
Adobe Flash Player <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 21.0.0.242. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition ...
PHP 5.6.x < 5.6.22 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.22. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the gdContributionsCalc function within file ext/gd/libgd/gdinterpolation.c. An unauthenticated,...
7-Zip < 16.00 Multiple Vulnerabilities
The version of 7-Zip installed on the remote Windows host is prior to 16.0. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exits in the CHandler::ExtractZlibFile function within file Archive\HfsHandler.cpp due to improper validation of user-supplied...