Invision Power Board 3.4.5 SQLi Vulnerability

Invision Power Board is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibSass Denial of Service Vulnerability (CNVD-2017-27708)

LibSass is an open source written in C using Sass CSS extension language parser . A denial of service vulnerability exists in the 'Sass::Eval::operator' function in the eval.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service...

phpMyAdmin Multiple XSS Vulnerabilities (Sep 2011) - Linux

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpMyAdmin Multiple XSS Vulnerabilities (Sep 2011) - Windows

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibSass 'lex' Function Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'lex' function of the parser.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption with the help of...

LibSass eval.cpp File Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the eval.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass 'Parser::advanceToNextToken' Function Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'Parser::advanceToNextToken' function of the parser.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack...

LibSass Heap Buffer Out-of-Bounds Read Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the 'Sass::Prelexer::relinebreak' function of the lexer.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially...

UBUNTU-CVE-2017-11605

There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11342

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

LibSass ast.cpp File Remote Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the ast.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass 'json_mkstream()' function heap buffer overflow vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer overflow vulnerability exists in the 'jsonmkstream' function of the sasscontext.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service heap...

CPython Man in Middle Attack and Code Execution Vulnerabilities - Linux

CPython is prone to a man in middle attack and an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpMyAdmin 3.4.x < 3.4.5 Multiple XSS (PMASA-2011-14)

Binary data 6026.prm...

Multiple Vulnerabilities in Phorum 3.4.5

Phorum 3.4.5 Vulnerabilities ----------------------------- Credit: Author: : Calum Power Versions : = 3.4.5 Vendor : Phorum Vendor URL : http://phorum.org Vendor Contacted: Yes Vendor Fix: Phorum has released Phorum v3.4.6 as a response to this advisory. Please patch your vulnerable software ASAP...