Microsoft SharePoint Foundation Privilege Elevation Vulnerability (3000431)

This host is missing an important security update according to Microsoft Bulletin MS14-073. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Mingle Forum 1.0.28 - XSS & FPD

The mingle-forum WordPress plugin was affected by a XSS & FPD security vulnerability...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

CVE-2014-6436

creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39316...

Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation

The Lazyest Gallery WordPress plugin was affected by a Multiple File/Directory Insecure Permissions Local Content Manipulation security vulnerability...

DZS Video Gallery 3.1.3 - Remote File Disclosure

The dzs-videogallery WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Image News Slider 3.1 - Multiple Unspecified Remote Issues

The wp-image-news-slider WordPress plugin was affected by a Multiple Unspecified Remote Issues security vulnerability...

RokBox <= 2.13 - error_log Direct Request Error Log Information Disclosure

The wprokbox WordPress plugin was affected by an errorlog Direct Request Error Log Information Disclosure security vulnerability...

File Uploader 1.1 index.php config[root_ordner] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application...

UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability

No description provided by source...

bfriars.ox.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-45961 Description| Value ---|--- Affected Website:| bfriars.ox.ac.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-3868

creationtimestamp| type| source ---|---|--- 2014-06-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39223...

CentOS Update for wireshark CESA-2014:0342 centos6

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2014:0342 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2013-4082

The vwrread function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via...

Ubuntu Update for libx11 USN-1854-1

Check for the Version of libx11 OpenVAS Vulnerability Test $Id: gbubuntuUSN18541.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for libx11 USN-1854-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

gpEasy 3.5.2 Cross Site Scripting

Advisory ID: HTB23137 Product: gpEasy Vendor: gpeasy Vulnerable Versions: 3.5.2 and probably prior Tested Version: 3.5.2 Vendor Notification: January 2, 2013 Vendor Patch: January 2, 2013 Public Disclosure: January 23, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference:...

Adobe Reader 10.1.4 - JP2KLib&CoolType Crash (PoC)

Title : Adobe Reader 10.1.4 JP2KLib&CoolType WriteAV Vulnerability Version : 10.1.4.38 Date : 2012-11-20 Vendor : http://www.adobe.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh...

Fedora Update for bind-dyndb-ldap FEDORA-2012-15981

Check for the Version of bind-dyndb-ldap OpenVAS Vulnerability Test Fedora Update for bind-dyndb-ldap FEDORA-2012-15981 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2012-3548

The dissectdrda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a small value for a certain length field in a capture file...

GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities

Document Title: =============== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=538 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 53...