375 matches found
OPENSUSE-SU-2020:0522-1 Security update for mp3gain
This update for mp3gain fixes the following issues: Update to version 1.6.2. - CVE-2019-18359: Fixed a buffer over-read was discovered in ReadMP3APETag boo1154971...
Memcached buffer overflow vulnerability (CNVD-2020-23209)
Memcached is the United States Brad Fitzpatrick Brad Fitzpatrick software developers of a high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to the site...
Memcached 1.6.x < 1.6.2 DoS Vulnerability
Memcached is prone to a denial of service DoS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
HashiCorp Consul HTTP/RPC services Denial of Service Vulnerability
HashiCorp Consul is a service grid for service discovery, runtime configuration and solutions for microservice applications and infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise versions 1.6.2 and earlier. An attacker could exploit the vulnerability to caus...
Security Bulletin: Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package
Summary Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package Vulnerability Details CVEID: CVE-2019-0205 DESCRIPTION: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue...
Debian DLA-1967-1 : libpcap security update
libpcap Packet CAPture, a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added sanity checks for PHB header length. For Debian 8 'Jessie', this problem has been fixed in version 1.6.2-2+deb8u1. We recommend that you...
WordPress microblog-poster plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. microblog-poster is a plugin used to automatically post web content to social media. A SQL injection vulnerability exists in the...
Joomla! 1.6.2 < 3.9.11 Incorrect Access Control
According to its self-reported version number, the detected Joomla! application is affected by an incorrect access control vulnerability in versions 1.6.2 to 3.9.10 due to inadequate checks in comcontact. Note that the scanner has not tested for these issues but has instead relied only on the...
WordPress Advanced Contact form 7 DB Plugin < 1.6.2 SQL Injection Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
PT-2019-13431 · Vsourz Digital · Vsourz Digital Advanced Cf7 Db Plugin
Name of the Vulnerable Software and Affected Versions: Vsourz Digital Advanced CF7 DB plugin versions prior to 1.6.2 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system. Recommendations: For Vsourz Digital Advanced CF7 DB...
CVE-2018-20849
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...
Arastta eCommerce Cross-Site Scripting Vulnerability
Arastta eCommerce is an open source eCommerce platform. A cross-site scripting vulnerability exists in Arastta eCommerce version 1.6.2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...
Fedora 30 : mosquitto (2019-cc896df591)
1.6.2 ===== Broker : - Fix memory access after free, leading to possible crash, when v5 client with Will message disconnects, where the Will message has as its first property one of content-type, correlation-data, payload-format-indicator, or response-topic. - Fix build for WITHTLS=no. - Fix Will...
Improper access control
Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the attacker must get write access to "any"...
CVE-2019-1000002
Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the attacker must get write access to "any"...
Learning With Texts 1.6.2 SQL Injection
Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...
Learning with Texts 1.6.2 - 'start' SQL Injection
Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...
Remarkable Cross-Site Scripting Vulnerability
Remarkable is a Markdown a markup language parser. A cross-site scripting vulnerability exists in Remarkable 1.6.2 and earlier versions. A remote attacker can exploit this vulnerability to execute JavaScript code...