276 matches found
CVE-2017-1000360
StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
Design/Logic Flaw
DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0...
PYSEC-2017-62
Cross-site scripting XSS vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
PYSEC-2017-63
Multiple cross-site scripting XSS vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Unspecified Vulnerability in Oracle Solaris Cluster Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster check files subcomponent of the Solaris Cluste...
CVE-2016-1000129
Reflected XSS in wordpress plugin defa-online-image-protector v3.3...
CVE-2016-1000129
Reflected XSS in wordpress plugin defa-online-image-protector v3.3...
HPE Synergy Planning Tool Remote Arbitrary Code Execution Vulnerability
HPE Synergy Planning Tool is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A security vulnerability exists in the HA for Postgresql subcomponent of the Solaris Cluster...
WordPress Ultimate Membership Pro 3.3 Plugin - SQL Injection
Exploit for php platform in category web applications Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass...
nGrinder Cross-Site Scripting Vulnerability
nGrinder is an easy-to-manage and use performance testing system based on Grinder load testing framework. A cross-site scripting vulnerability exists in nGrinder version 3.3. The vulnerability allows attackers to inject arbitrary Web script or HTML...
CVE-2016-1348
Summary of the CVE-2016-1348 issue : Cisco IOS and IOS XE DHCPv6 Relay Denial of Service vulnerability arises from insufficient validation of DHCPv6 relay messages. An unauthenticated, remote attacker can trigger a device reload, leading to a DoS condition. Affected software includes Cisco IOS 15...
Cross-Site Scripting Vulnerability in DotCMS Blog Search Page
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...
Joomla! cross-site request forgery vulnerability (CNVD-2015-08379)
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site request forgery vulnerability exists in the comtemplates component in Joomla! versions 3.2.0 through...
dotCMS 3.2.4 Multiple Vulnerabilities
Summary DotCMS is the next generation of Content Management System CMS. Quick to deploy, open source, Java-based, open APIs, extensible and massively scalable, dotCMS can rapidly deliver personalized, engaging multi-channel sites, web apps, campaigns, one-pagers, intranets - all types of content...
WordPress Powerplay Gallery Plugin Arbitrary File Upload Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.Powerplay Gallery is one of the gallery plug-ins for displaying images. An arbitrary file upload vulnerability exists ...
Cross-Site Request Forgery Vulnerability in Joomla!
Joomla! is an open source content management system CMS. A cross-site request forgery vulnerability exists in Joomla! versions 3.2.0 through 3.3.x, and 3.4.x before 3.4.2, which allows remote attackers to hijack requests to upload code via unknown vectors...
GoAutoDial 3.3 multiple vulnerabilities
Affected software: GoAutoDial Affected version: 3.3-1406088000 GoAdmin and previous releases of GoAutodial 3.3 Associated CVEs: CVE-2015-2842, CVE-2015-2843, CVE-2015-2844, CVE-2015-2845 Vendor advisory: http://goautodial.org/news/21 Abstract: Multiple vulnerabilties exist in the GoAutodial 3.3...
GoAutoDial CE 3.3-1406088000 - Authentication Bypass Arbitrary File Upload Command Injection
GoAutoDial CE 3.3-1406088000 - Authentication Bypass Arbitrary File Upload Command Injection Affected software: GoAutoDial Affected version: 3.3-1406088000 GoAdmin and previous releases of GoAutodial 3.3 Associated CVEs: CVE-2015-2842, CVE-2015-2843, CVE-2015-2844, CVE-2015-2845 Vendor advisory:...