ownCloud Desktop Client Man-in-the-Middle Attack Vulnerability

The ownCloud Desktop Client is a desktop client for connecting to OwnCloud servers. A man-in-the-middle attack vulnerability exists in versions of ownCloud Desktop Client prior to 2.0.1. An attacker can perform a man-in-the-middle attack by exploiting the server with a self-signed certificate...

Persistent Systems Accelerite Radia Client Automation Stack Buffer Overflow Vulnerability

Persistent Systems Accelerite Radia Client Automation formerly known as HP Client Automation is a client automation management solution from Persistent Systems India. The solution provides monitoring, alerting, auto-remediation and reporting on hardware, applications and operating systems. A stac...

phpRechnung SQL Injection Vulnerability

phpRechnung is a web-based accounting software. A SQL injection vulnerability exists in the list.php script in versions prior to phpRechnung 1.6.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

SQLite Elevation of Privilege Vulnerability

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. An elevation of privilege vulnerability exists in versions prior to SQLite...

3S-Smart Software Solutions CODESYS Gateway Server Heap Buffer Overflow Vulnerability

3S-Smart Software Solutions CoDeSys is a set of PLC programmable logic controller software programming tools from 3S-Smart Software Solutions, Germany.CODESYS Gateway Server is one of the CODESYS Gateway Servers. A heap buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS...

DEBIAN-CVE-2015-6938

Cross-site scripting XSS vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site reque...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-05963)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A security vulnerability exists in Adobe Shockwave Player versions prior to 12.2.0.162, which can be exploited by an attacker to execute arbitrary code or cause a denial of service memory...

Fortinet FortiClient Arbitrary Code Execution Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end-users with antivirus, encryption, and other services. An arbitrary code vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to execute arbitrary code with kernel privileges b...

IPPUSBXD Elevation of Privilege Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A security vulnerability exists in IPPUSBXD versions prior to 1.22, which originates from the program listening on all interfaces. A remote attacker could exploit the vulnerability by sending a direct request to gain access to a...

MyBB Cross-Site Scripting Vulnerability (CNVD-2015-05800)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in versions of MyBB prior to 1.8.5, which allows remote attackers to inject arbitrary web script or HTML via the content of a post...

Fortinet FortiClient Driver File Disclosure Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A driver file disclosure vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to read arbitrary kernel memory via a...

Design/Logic Flaw

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

HP Matrix Operating Environment Information Disclosure Vulnerability (CNVD-2015-05711)

HP Matrix Operating Environment is a suite of cloud management software designed for infrastructure services from Hewlett-Packard HP. A security vulnerability exists in HP Matrix Operating Environment versions prior to 7.5.0. A remote attacker could exploit the vulnerability to obtain sensitive...

OpenSSH sshd monitor.c file memory misreference vulnerability

OpenSSH OpenBSD Secure Shell on non-OpenBSD platforms is a set of connectivity tools for secure access to remote computers running on non-OpenBSD BSD-based UNIX implementations platforms maintained by the OpenBSD Project. A memory misreference vulnerability exists in the 'mmanswerpamfreectx'...

Wordpress Ephox Plupload Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed in PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Ephox Plupload is a Web browser-based file upload module from Ephox, which supports displaying upload progress, automatic image...

Cisco IM and Presence Service Cross-Site Scripting Vulnerability

Cisco IM and Presence Service is the United States Cisco Cisco company's suite of software can provide enterprise-class instant messaging and network presence services. A cross-site scripting vulnerability exists in Cisco IM and Presence Service versions prior to 10.5 MR1, which stems from the...

Path Traversal Vulnerability in Joomla! Helpdesk Pro Plugin

Joomla! is a well-known content management system in foreign countries. Joomla! is a software system developed using the PHP language coupled with a MySQL database, which can be implemented on a variety of different platforms such as Linux, Windows, MacOSX and so on. A path traversal vulnerabilit...

Ansible Bypass Security Restrictions Vulnerability

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security vulnerability...

Zenphoto has multiple unspecified vulnerabilities

ZenPhoto is a compact photo album software with RSS output, FTP upload method, Tag function, comment reply and other features. The following security vulnerabilities exist in versions of Zenphoto prior to 1.4.9, which can be exploited by attackers to take control of the application, access or...

jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...