express-restify-mongoose information disclosure vulnerability

express-restify-mongoose is a tool for creating interfaces for Mongoose Model. A security vulnerability exists in express-restify-mongoose version 2.4.2 and earlier and versions 3.0.X through 3.0.1. An attacker can exploit the vulnerability by sending a request to obtain the passwords of all user...

Trend Micro Smart Protection Server Remote Denial of Service Vulnerability

Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A security vulnerability exists in version 3.x of Trend Micro Smart Protection Server Standalone. A remote attacker could exploit this vulnerability by sending a large number of specially...

Command Execution Vulnerability in Cscms v3.5 Backend

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. A command execution vulnerability exists in the backend of Cscms v3.5, which allows attackers to remotely execute commands and gain server privileges...

UPX denial of service vulnerability

UPX is an executable file compressor. A security vulnerability exists in the 'PackLinuxElf64::unpack' function of the plxelf.cpp file in UPX version 3.95. A remote attacker can exploit this vulnerability to cause a denial of service double release with the help of specially crafted files...

baijiacms Path Leakage Vulnerability

baijiacms is a content management system CMS for e-commerce. A security vulnerability exists in baijiacms version 3. An attacker can exploit this vulnerability by sending an index.php?mod=mobile&name=member&do=index request to obtain a physical path...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09659)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A security vulnerability exists in the 2345BdPcSafe.sys X64 application file in 2345 Security Guard version 3.7, which originates from the program failing to validate the input value of IOCTL...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09305)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A security vulnerability exists in the 2345NetFirewall.sys driver file in 2345 Security Guard version 3.7, which originates from the program failing to validate an input value from IOCtl 0x0022204...

ansible-tower: Remote code execution by users with access to define variables in job templates

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

HongCMS Cross-Site Scripting Vulnerability

HongCMS is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in the Add News feature in HongCMS version 3.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a content field...

baijiacms Cross-Site Request Forgery Vulnerability

baijiacms is a content management system CMS for e-commerce. A cross-site request forgery vulnerability exists in baijiacms version 3. A remote attacker can add an administrator account with index.php?mod=site&op=edituser&name=manager&do=user to exploit this vulnerability...

CVE-2018-10265

An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...

CVE-2018-10219

baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request...

YzmCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-08781)

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site request forgery vulnerability exists in YzmCMS version 3.8. A remote attacker can add an administrator account with the help of the /index.php/admin/adminmanage/add.html page to explo...

NASA CFITSIO 'ffghbn' Function Heap Buffer Overflow Vulnerability

NASA CFITSIO is a FITS file subroutine library for reading and writing data files in FITS Flexible Image Transfer System format. A heap buffer overflow vulnerability exists in the 'ffghbn' function in NASA CFITSIO version 3.42. An attacker could exploit this vulnerability by sending a FIT image t...

XYHCMS Cross-Site Request Forgery Vulnerability

XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in XYHCMS version 3.5. A remote attacker can exploit this vulnerability by sending an index.php?g=Manage&m=Rbac&a=addUser request to add an administrator account...

tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...

iScripts EasyCreate cross-site scripting vulnerability (CNVD-2018-08315)

IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site title field in IScripts EasyCreate version...

CA API Developer Portal Cross-Site Scripting Vulnerability

CA API Developer Portal is a set of CA's API Application Programming Interface query function for software developers. A cross-site scripting vulnerability exists in the profile picture handling in CA API Developer Portal versions 3.5 through 3.5 CR6, which stems from the program failing to...

CVE-2018-6586

CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing...

PT-2018-17651 · Ca · Ca Api Developer Portal

Name of the Vulnerable Software and Affected Versions: CA API Developer Portal versions 3.5 up to and including 3.5 CR6 Description: The issue is related to a reflected cross-site scripting vulnerability. This vulnerability is associated with the widgetID variable. Recommendations: For CA API...