CVE-2018-5381

Removed by vendor...

Quagga bgpd is affected by multiple vulnerabilities

Overview The Quagga BGP daemon bgpd prior to version 1.2.3 may be vulnerable to multiple issues that may result in denial of service, information disclosure, or remote code execution. Description CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer - CVE-2018-5378...

CVE-2018-5380

The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...

CVE-2018-5378

The Quagga BGP daemon bgpd prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash...

PT-2018-16935 · Quagga +3 · Quagga +3

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 1.2.3 Description: The issue is related to a bug in the parsing of "Capabilities" in BGP OPEN messages. Specifically, the bgp packet.c:bgp capability msg parse function can enter an infinite loop on invalid capabiliti...

PT-2018-3095 · Quagga +3 · Quagga +3

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 1.2.3 Description: The issue is related to errors in processing internal BGP code-to-string conversion tables used for debug, based on input. This can lead to a potential denial of service. Recommendations: For versio...

Cross-site scripting vulnerability in phpLDAPadmin htdocs/entry_chooser.php file

phpLDAPadmin is a web-based LDAP client that allows easy management of LDAP servers. A cross-site scripting vulnerability exists in the htdocs/entrychooser.php file in phpLDAPadmin 1.2.3 and earlier versions. A remote attacker can inject code with the help of the 'form', 'element', 'rdn' or...

GLink Word Link Script 1.2.3 - SQL Injection

Exploit Title: GLink Word Link Script v1.2.3 - SQL Injection Google Dork: N/A Date: 22.03.2017 Vendor Homepage: http://www.tufat.com/ Software: http://www.tufat.com/wp-content/uploads/sites/4/2015/zips/script131.zip Demo: http://www.tufat.com/glink-word-link-script/ Version: 1.2.3 Tested on: Win7...

Debian DLA-349-1 : python-django security update

It was discovered that there was a potential settings leak in date template filter of Django, a web-development framework. If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, e.g. lastupdated|date:userdateformat , then a malicious...

Vastal I-Tech phpVID Cross Site Scripting Vulnerability

Vastal I-Tech phpVID is a set of video sharing software by Vastal I-Tech India. The software supports browsing videos, commenting on videos, uploading videos and more. A cross-site scripting vulnerability exists in Vastal I-Tech phpVID versions 1.2.3 and 0.9.9, which stems from the program failin...

The vulnerability of the Gentoo Linux operating system, which allows a malicious individual to compromise the accessibility of protected information

The vulnerability of the dbus package up to version 1.2.3-r1 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...

Vastal I-Tech phpVID SQL Injection Vulnerability

Vastal I-Tech phpVID is a set of video sharing software by Vastal I-Tech India. The software supports browsing videos, commenting on videos, uploading videos and more. A SQL injection vulnerability exists in the groups.php script in Vastal I-Tech phpVID version 0.9.9 and version 1.2.3. A remote...

Design/Logic Flaw

The Avira Secure Backup aka com.avira.avirabackup application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Malleo 1.2.3 'admin.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34588/info Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the conte...

Justin Hagstrom Auto Directory Index 1.2.3 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9056/info It has been reported that Auto Directory Index is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'dir' parameter,...

CVE-2013-4386

Multiple SQL injection vulnerabilities in app/models/concerns/hostcommon.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 fqdn or 2 hostgroup parameter...

PT-2013-4989 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.2.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the fqdn or hostgroup parameter in the app/models/concerns/host common.rb file. Recommendations: For versio...

icedtea-web security update

1.2.3-2 - Added temporally! posttrans forcing creation of symlinks - should be removed next release - Resolves: rhbz949094 1.2.3-1 - fixed postun - removal of alternatives for plugin restricted to correct removal process only - fixed date in changelog previous entry - Resolves: rhbz949094 1.2.3-0...

JVN#08307791: Plume vulnerable to cross-site scripting

Plume is a Content Management System CMS. Plume contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of a user that is logged in as administrator. Solution Update the Software Update to the latest version according to the information provide...

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...