Stored Cross-Site Scripting Vulnerability in 50CMS V3.0

50CMS is an open source content management system for software developers, program enthusiasts, and web designers. A stored cross-site scripting vulnerability exists in 50CMS V3.0. Due to the lack of security filtering of form inputs, an attacker can exploit the vulnerability to write arbitrary...

Wordpress anti-plagiarism plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. anti-plagiarism is one of the free online plagiarism checking plugin. A cross-site scripting vulnerability exists in version 3....

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions File Containment Vulnerability

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...

CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

Kagao has multiple vulnerabilities

Kogao is a German professional marketplace classification software based on WEB pages. A SQL injection and cross-site scripting vulnerability exists in Kagao v3.0 - Professional Classified Market version, which can be exploited by an attacker to inject malicious scripts, take control of a databas...

DEBIAN-CVE-2016-5427

PowerDNS aka pdns Authoritative Server before 3.4.10 does not properly handle a . dot inside labels, which allows remote attackers to cause a denial of service backend CPU consumption via a crafted DNS query...

UBUNTU-CVE-2016-7143

The mauthenticate function in modules/msasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

EMC ViPR SRM Cross-Site Scripting Vulnerability

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

CVE-2016-1433

Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...

Red Hat OpenShift Enterprise Denial of Service Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A denial of service vulnerability exists in Negotiator in Red Hat OpenShift Enterprise versions 3.1 and 3.2, which can be exploited by...

Changing delivery group icons with storefront 3.0 or above in the environment.

...

Knight CMS suffers from SQL injection vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System version 3.7 suffers from a SQL injection vulnerability, which is exploited by attackers to obtain sensitive information due to unfiltered variable names...

Android on Nexus Privilege Acquisition Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA.Linux kernel on ARM platforms is the kernel used in the operating system Linux, which runs on the ARM chipset, released by the Linux...

Linux kernel elevation of privilege vulnerability (CNVD-2016-06287)

The Linux kernel, released by the Linux Foundation in the United States and used by the operating system Linux, is an open-source, free, and most widely ported operating system kernel. An elevation of privilege vulnerability exists in versions of Linux kernel prior to 3.11 on ARM platforms,...

Knight CMS Talent System SQL Injection Vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 exists SQL injection vulnerability, due to the variable $id filtering was omitted to cause injection, attackers use the vulnerability to obtain sensitive information...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the dhcp3-relay package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Cisco Wireless LAN Controller 4100 software allows a malicious individual to cause service failure.

The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...

The vulnerability of the Cisco Wireless LAN Controller 2100 software allows a malicious individual to cause service failure.

The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...

libarchive mtree parse_device function stack buffer overflow vulnerability

libarchive is a multi-format archive and compression library. A stack buffer overflow vulnerability exists in the mtree parsedevice function in libarchive version 3.1.2. An attacker can exploit this vulnerability with a specially crafted mtree file to cause a denial of service memory corruption, ...

Moxa PT-7728 Unauthorized Access Vulnerability

Moxa PT-7728 is an Ethernet switch product from Moxa for managing industrial applications. A security vulnerability exists in the Moxa PT-7728 version 3.4 build 15081113, which originates from the program failing to properly perform authentication. A remote attacker could exploit the vulnerabilit...