5837 matches found
SOL90230486 - Linux kernel vulnerability CVE-2015-7613
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
vBulletin 5.x Remote Code Execution
Title: Vbulletin 5.x - Remote Code Execution Exploit + Product: vbulletin + Vendor: http://vbulletin.com + Vulnerable Versions: Vbulletin 5.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...
SOL05534090 - Java vulnerability CVE-2015-4803
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
JBoss WildFly <= 9.0.2 RCE Vulnerability
JBoss WildFly is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
JNews,8.5.1,SQL Injection
JNews, 8.5.1 and all previous, SQL Injection Resolution: update to 8.7.1 Update notice url: http://www.joobi.co/blog/jnews-8-7-released.html Note that due to discrepancy in developer's code between package and repository, some versions of previous security release 8.6.1 are still vulnerable...
ATutor 2.2 Cross Site Scripting Vulnerability
ATutor versions 2.2 and below suffer from a cross site scripting vulnerability. -------------------------------------------------------------------------- ATutor printHelps$h; User input passed through the "h" GET parameter is not properly sanitized before being passed to the "Message::printHelps...
SOL17525 - NTP vulnerability CVE-2015-7853
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Oracle MySQL Unspecified Vulnerability-04 (Oct 2015) - Windows
Oracle MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescripti...
Reflected Cross-Site Scripting (XSS) in iTop
Advisory ID: HTB23268 Product: iTop Vendor: Combodo SARL Vulnerable Versions: 2.1.0-2127 and probably prior Tested Version: 2.1.0-2127 Advisory Publication: July 29, 2015 without technical details Vendor Notification: July 29, 2015 Vendor Patch: July 30, 2015 Public Disclosure: September 23, 2015...
Potential Command Injection
Overview Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module. Mitigating Factors The email script is not enabled by default, it has to be manually added to hubot's list of loaded scripts...
SOL17444 - libXfont vulnerabilities CVE-2015-1802, CVE-2015-1803, and CVE-2015-1804
Recommended Action If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are currently...
Microsoft Internet Explorer Multiple Vulnerabilities (3096441)
This host is missing a critical security update according to Microsoft Bulletin MS15-106. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress Appointment Booking Calendar Plugin SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation, and Appointment Booking Calendar is one of the appointment calendar plugins. A SQL injection vulnerability exists in the cpabcappointmentsadminintcalendarlist.inc.php script of the...
[SYSS-2015-003] Kaspersky Small Office Security - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-003 Product: Kaspersky Small Office Security KSOS Vendor: Kaspersky Lab ZAO Affected Versions: 13.0.4.233 Tested Versions: 13.0.4.233 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk...
Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)
Microsoft Internet Explorer 11 - Stack Underflow Crash PoC crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1=...
Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)
crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1= document.createElement'B'; document.all8.appendChildelemTree1; elemTree2=...
Fedora Update for drupal6-views_bulk_operations FEDORA-2015-13758
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Magento eCommerce - Remote Code Execution Exploit
Magento shoplift exploit that adds an administrator account. Flaw originally discovered by CheckPoint. Exploit Title : Magento Shoplift exploit SUPEE-5344 Author : Manish Kishan Tanwar AKA error1046 Date : 25/08/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh...
SOL17174 - OpenJDK vulnerability CVE-2015-4733
Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...
Fedora Update for firefox FEDORA-2015-13436
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...