CVE-2016-5786

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

CVE-2016-5786

CVE-2016-5786 affects OmniMetrix OmniView (Version 1.2). The vulnerability arises because the OmniView web application transmits credentials using HTTP (cleartext), enabling network-level interception and potential credential compromise. The issue is categorized under cleartext transmission of se...

PT-2017-10091

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A...

FTP Made Easy PRO 1.2 Arbitrary File Download

Exploit Title: FTP Made Easy PRO Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy: https://codecanyon.net/item/ftp-made-easy-pro-php-multiple-ftp-manager-client-with-code-editor/17460747 Demo:...

Online Hotel Booking System Pro 1.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo:...

PDfAdd DLL Hijacking Vulnerability

PDfAdd is a free geometric drawing tool. A DLL hijacking vulnerability exists in PDfAdd version 1.2, which can be exploited by local attackers to inject code or gain advanced access...

vlcms_v1. 2 arbitrary file read vulnerability

No description provided by source...

Wordpress hdw-tube plugin cross-site scripting vulnerability (CNVD-2016-09347)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress hdw-tube plugin version 1.2. An attacker can exploit...

Wordpress hdw-tube plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress hdw-tube plugin version 1.2. An attacker can exploit...

CVE-2016-1000134

Reflected XSS in wordpress plugin hdw-tube v1.2...

Novell Filr Insecure File Permissions Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A security vulnerability exists in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier, which originates from a program that assigns global file '/etc/profile.d/vainit.sh'. This...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

WordPress Ebook Download Plugin Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

ZNC < 1.4 DoS Vulnerability

ZNC is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:znc:znc";...

WordPress WP Accurate Form Data 1.2 XSS / CSRF

Title: WordPress 'WP Accurate Form Data' Plugin Version: 1.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-21 Download: - https://wordpress.org/plugins/accurate-form-data-real-time-form-validation/ - https://plugins.svn.wordpress.org/accurate-form-data-real-time-form-validatio...

Seasar S2Struts vulnerable to input validation bypass

Overview Seasar S2Struts provided by The Seasar Foundation is a software framework for developing Java web applications. Seasar S2Struts is vulnerable to an issue contained in the Apache Struts 1 Validator, because S2Struts 1.2.x uses Apache Struts 1.2.x, and S2Struts 1.3.x uses Apache Struts...

(RHSA-2014:1905) Low: Red Hat OpenShift Enterprise 1.2 - Final Retirement Notice

In accordance with the Red Hat OpenShift Enterprise Life Cycle Policy, the two-year life cycle of Production Support for version 1.2 will end on November 27, 2014. In addition, technical support through Red Hat's Global Support Services will no longer be provided after this date. We encourage...

Clockstone <= 1.2 - Arbitrary File Upload

The clockstone WordPress theme was affected by an upload.php Arbitrary File Upload security vulnerability...

xClassified - 'ads.php' SQL Injection

source: https://www.securityfocus.com/bid/68438/info xClassified is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Pablo Software Solutions FTP Service 1.2 Plaintext Password Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted that while this weakness has...