Authorization Bypass

OmniAuth-saml is vulnerable to authentication bypass. The application uses a vulnerable version of ruby-saml , meaning it does not properly parse comments in certain XML nodes, causing text after a comment being lost before signing the SAML Message. This allows a malicious user to modify a SAML...

Fedora Update for qt5-qtwebengine FEDORA-2018-c0d3db441f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-OpenEXR FEDORA-2018-b152c791cc

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TestLink Open Source Test Management Insecure Direct Object Reference

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Insecure Direct Object Reference product: TestLink Open Source Test Management vulnerable version: 1.9.17 fixed version: 1.9.17 after November 2017, and the current...

Navarino Infinity Blind SQL Injection / Session Fixation

There is also a blog post about that on: https://medium.com/@evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3 Vulnerability Security Advisory ======================================================================= title: Multiple vulnerabilities product: All Navarino infinity products...

Google Chrome Unspecified Security Vulnerability (Feb 2018) - Linux

Google Chrome is prone to an unspecified remote security vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Immunity Canvas: HPE_ILO4_ADDNEWADMIN

Name| hpeilo4addNewAdmin ---|--- CVE| CVE-2017-12542 Exploit Pack| CANVAS Description| HPE iLO 4 - AddNewAdmin Notes| CVE Name: CVE-2017-12542 VENDOR: Hewlett Packard Enterprise Changelog: Notes: Vulnerable versions: HPE iLO 4 2.53 References:...

Adobe Acrobat DC (Classic Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice 'WEBSERVICE formula' Remote File Disclosure Vulnerability - Windows

LibreOffice is prone to a remote file disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Puppet Enterprise Remote Code Execution Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. A remote code execution vulnerability...

Fedora Update for wordpress FEDORA-2018-19c693fd9a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Walt Disney Per-Face Texture Mapping faceInfoSize Code Execution Vulnerability

Summary An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to...

PT-2018-5349 · Ruby On Rails · Rails Admin

Name of the Vulnerable Software and Affected Versions: rails admin rails gem version 1.2.0 Description: A cross site scripting XSS issue exists in the add filter functionality. This can be triggered by a specially crafted URL, allowing an attacker to execute arbitrary javascript on the victim's...

Fedora Update for osc-source_validator FEDORA-2018-903354c26c

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Smooth Slider Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Smooth Slider plugin is one of the slider to add plug-ins . A SQL injection vulnerability exists in the...

Cheetah Mobile Armorfly Browser&Downloader Security Bypass Vulnerability

Cheetah Mobile Armorfly Browser&Downloader is a browser with download function from Cheetah Mobile China. A security bypass vulnerability exists in Cheetah Mobile Armorfly Browser&Downloader version 1.1.05.0010. An attacker can exploit this vulnerability to bypass the same-origin policy...

PT-2018-3315 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.58 and prior MySQL Server versions 5.6.38 and prior MySQL Server versions 5.7.20 and prior Description: The vulnerability in the MySQL Server component of Oracle MySQL, specifically in the Server:Optimizer...

WordPress Tabs Plugin <= 1.8.0 XSS Vulnerability

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Fedora Update for python-jsonrpclib FEDORA-2018-92de33f3b9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Excel 2010 Service Pack 2 RCE Vulnerability (KB4011660)

This host is missing an important security update according to Microsoft KB4011660 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...