PT-2019-8757 · Moxa · Moxa Awk-3121

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3121 version 1.14 Description: An issue was discovered where the device allows HTTP traffic by default, providing an insecure communication mechanism for users connecting to the web server. This allows an attacker to easily sniff the...

CVE-2018-1000665

Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and testsDOH/base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliv...

CVE-2018-1000665

Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and testsDOH/base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliv...

Dojo Toolkit 1.13 Cross Site Scripting Vulnerability

Exploit for jsp platform in category web applications Product: Dojo Toolkit Manufacturer: JS Foundation Affected Versions: 1.13 Tested Versions: 1.13, 1.10.7 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Manufacturer Notification: 2018-07-02 Solution...

CloudBees Jenkins meliora-testlab Plugin Information Disclosure Vulnerability

CloudBees Jenkins is a set of U.S. CloudBees company based on Java development of continuous integration tools , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks . meliora-testlab Plugin is used in one of the results of unit tests publishe...

PT-2018-3673 · Dojo +2 · Dojo Toolkit +2

Name of the Vulnerable Software and Affected Versions: Dojo Toolkit versions prior to 1.14 Description: The issue is related to unescaped string injection in dojox/Grid/DataGrid, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected...

Apache Tika 1.9 - 1.13 Java Code Execution Vulnerability

Apache Tika is prone to an arbitrary Java code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Improper access control

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1...

CVE-2018-1002150

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1...

UBUNTU-CVE-2018-1002150

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1...

CVE-2018-1002150

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1...

PYSEC-2018-86

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1...

CVE-2018-1002150

CVE-2018-1002150 affects Koji hub, with versions 1.12, 1.13, 1.14 and 1.15 featuring an incorrect access control vulnerability that allows arbitrary filesystem read/write. The issue has been fixed in 1.12.1, 1.13.1, 1.14.1 and 1.15.1. CVSS data in the connected sources indicate a high/critical im...

wget security update

1.14-15.1 - Fixed various security flaws CVE-2017-13089, CVE-2017-13090...

CVE-2017-11350

Cross-Site Request Forgery CSRF exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices...

Potrace 'interpolate_cubic' function out-of-bounds read vulnerability

Potrace is a set of bitmap image processing tools developed by software developer Peter Selinger. The tool provides the ability to add smoothing effects, free scaling of images and other features. An out-of-bounds read vulnerability exists in the 'interpolatecubic' function of the mkbitmap.c file...

DEBIAN-CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

Potrace Buffer Overflow Vulnerability

Potrace is a set of bitmap image processing tools developed by software developer Peter Selinger. The tool provides the ability to add smoothing effects, free scaling of images and other features. A buffer overflow vulnerability exists in the 'bmreadbodybmp' function in the bitmapio.c file in...

Joomla! Component com_album 1.14 - Directory Traversal

Joomla! Component comalbum 1.14 - Directory Traversal Joomla Component comalbum Directory Traversal Vuln version Album 1.14 Author : DreamTurk mail : [email protected] home page : www.turkguvenligi.info Down : http://www.breedveld.net/index.php?option=comremository&Itemid=193&func=startdown&id=1...

Gentoo Security Advisory GLSA 200410-31 (Archive::Zip)

The remote host is missing updates announced in advisory GLSA 200410-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...