CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

DEBIAN-CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

CMS Made Simple PHP Object Injection Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A PHP object injection vulnerability exists in CMS...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-06376)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...

pfSense - (Authenticated) Group Member Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSense authenticated group member RCE', 'Description' = %q pfSense, a free BSD based open source firewall distribution, version 's4squatch',...

Server side request forgery (ssrf)

A Server Side Request Forgery SSRF vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affecte...

NS Download Shop Component SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions. NS Download Shop also known as comnsdownloadshop component is used in one of the download component. A SQL injection...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

NS Download Shop, 2.2.6, SQL Injection

NS Download Shop, 2.2.6, SQL Injection Resolution: update to 2.2.8 Update notice: https://nswd.co/extensions/help-desk/security-release-v2-2-8...

openSUSE Security Update : vlc (openSUSE-2017-1101)

This update for vlc to version 2.2.6 fixes several issues. This security issue was fixed : - CVE-2017-9300: Heap corruption allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted FLAC file bsc1041907. These non-security issues were fixed : -...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

Security fix for the ALT Linux 8 package vlc version 2.2.6.20170917-alt0.M80C.1

Sept. 18, 2017 Anton V. Boyarshinov 2.2.6.20170917-alt0.M80C.1 - 2.2.6+ Fixes: CVE-2017-10699, CVE-2017-8310, CVE-2017-8311, CVE-2017-8313, CVE-2017-9300, CVE-2017-9301...

Design/Logic Flaw

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address...

CVE-2017-9353

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address...

Wireshark Multiple Denial-of-Service Vulnerabilities-02 (Jun 2017) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Security fix for the ALT Linux 7 package wireshark version 2.2.6-alt1.M70P.1

April 14, 2017 Anton Farygin 2.2.6-alt1.M70P.1 - new version with these security fixes: wnpa-sec-2017-12 IMAP dissector crash CVE-2017-7703 wnpa-sec-2017-13 WBMXL dissector infinite loop CVE-2017-7702 wnpa-sec-2017-14 NetScaler file parser infinite loop CVE-2017-7700 wnpa-sec-2017-15 RPCoRDMA...

RhodeCode Information Disclosure Vulnerability

RhodeCode is a set of open source code base browsing and management tools , it is embedded push/pull server , support for LDAP/AD and permission system . A security vulnerability exists in RhodeCode 2.2.6 and earlier versions. A remote attacker can exploit this vulnerability to obtain sensitive...

Wordpress MM Forms Community Plugin 2.2.6 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins : http://downloads.wordpress.org/plugin/mm-forms-community.zip Date : 24-05-20...

ACal 2.2.6 - view Local File Inclusion

ACal 2.2.6 - view Local File Inclusion source: https://www.securityfocus.com/bid/61801/info ACal is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input before being used to include files. An attacker can exploit this vulnerability to view file...