Immunity Canvas: HPE_ILO4_ADDNEWADMIN

Name| hpeilo4addNewAdmin ---|--- CVE| CVE-2017-12542 Exploit Pack| CANVAS Description| HPE iLO 4 - AddNewAdmin Notes| CVE Name: CVE-2017-12542 VENDOR: Hewlett Packard Enterprise Changelog: Notes: Vulnerable versions: HPE iLO 4 2.53 References:...

Adobe Acrobat DC (Classic Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice 'WEBSERVICE formula' Remote File Disclosure Vulnerability - Windows

LibreOffice is prone to a remote file disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Puppet Enterprise Remote Code Execution Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. A remote code execution vulnerability...

Fedora Update for wordpress FEDORA-2018-19c693fd9a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Walt Disney Per-Face Texture Mapping faceInfoSize Code Execution Vulnerability

Summary An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to...

PT-2018-5349 · Ruby On Rails · Rails Admin

Name of the Vulnerable Software and Affected Versions: rails admin rails gem version 1.2.0 Description: A cross site scripting XSS issue exists in the add filter functionality. This can be triggered by a specially crafted URL, allowing an attacker to execute arbitrary javascript on the victim's...

WordPress Smooth Slider Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Smooth Slider plugin is one of the slider to add plug-ins . A SQL injection vulnerability exists in the...

Cheetah Mobile Armorfly Browser&Downloader Security Bypass Vulnerability

Cheetah Mobile Armorfly Browser&Downloader is a browser with download function from Cheetah Mobile China. A security bypass vulnerability exists in Cheetah Mobile Armorfly Browser&Downloader version 1.1.05.0010. An attacker can exploit this vulnerability to bypass the same-origin policy...

Fedora Update for osc-source_validator FEDORA-2018-903354c26c

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2018-3315 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.58 and prior MySQL Server versions 5.6.38 and prior MySQL Server versions 5.7.20 and prior Description: The vulnerability in the MySQL Server component of Oracle MySQL, specifically in the Server:Optimizer...

WordPress Tabs Plugin <= 1.8.0 XSS Vulnerability

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Fedora Update for python-jsonrpclib FEDORA-2018-92de33f3b9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Excel 2010 Service Pack 2 RCE Vulnerability (KB4011660)

This host is missing an important security update according to Microsoft KB4011660 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

ImageWorsener Denial of Service Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'getrawsampleint' function in the imagew-main.c file of the libimageworsener.a file in ImageWorsener version 1.3.2. When libjpeg 8d is used, an attacker can exploit this vulnerability to cause...

PT-2018-16853 · Malwarebytes +1 · Malwarebytes Premium +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes Premium version 3.3.1.2183 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e004 in the driver file...

Fedora Update for chromium FEDORA-2017-ea44f172e3

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IKARUS anti.virus Multiple Denial of Service/BSOD Vulnerabilities

IKARUS anti.virus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-1000427

marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...

FreePBX SQL Injection Vulnerability

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A SQL injection vulnerability exists in FreePBX version 10.13.66-32bit. The vulnerability can be exploited by a...