Django 3.3.0 Script Insertion

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability CVE-2016-6186 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Memory corruption

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3240 and CVE-2016-3242...

Drupal RESTWS Remote Code Execution Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in the Drupal RESTWS module. An attacker can exploit the vulnerability by sending a specially crafted request that results in...

Nusiorung CMS 2016 - (Login) Auth Bypass Vulnerability

Document Title: =============== Nusiorung CMS 2016 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1875 Release Date: ============= 2016-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 1875...

IBM BlueMix Cloud Script Insertion

Document Title: =============== IBM BlueMix Cloud - API Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1846 IBM Security Tracking ID: 5377-12593283 Release Date: ============= 2016-07-04 Vulnerability Laboratory ID VL-ID:...

IBM BlueMix Cloud - (API) Persistent Web Vulnerability

Document Title: =============== IBM BlueMix Cloud - API Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1846 IBM Security Tracking ID: 5377-12593283 Release Date: ============= 2016-07-03 Vulnerability Laboratory ID VL-ID:...

Soars-government system /TSPB/web/xzzx/xzzx. jsp parameter parentid SQL injection vulnerability

No description provided by source...

Farmers-government system /ExtWebModels/WebFront/town/Town. aspx file class parameter SQL injection vulnerability

No description provided by source...

Siemens SCALANCE M-800/S615 Web Vulnerability

OVERVIEW Siemens has identified a web security vulnerability in Siemen’s SCALANCE M-800 and S615 modules. This vulnerability was reported directly to Siemens by Alexander Van Maele and Tijl Deneut from HOWEST. Siemens has produced a new firmware version to mitigate this vulnerability. AFFECTED...

CA Release Automation Cross-Site Scripting Vulnerability (CNVD-2016-04443)

CA Release Automation formerly CA LISA Release Automation is a suite of enterprise-class release automation solutions from CA USA. The solution enables continuous delivery across the application lifecycle and can streamline and execute application releases, centralize application operations from...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-04394)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-04395)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in...

Alfine CMS 2.6 SQL Injection

Document Title: =============== Alfine CMS v2.6 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1863 Release Date: ============= 2016-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 1863...

CVE-2016-3211

CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...

CVE-2016-1690

CVE-2016-1690 affects Google Chrome Autofill: the interaction between field updates and JavaScript that triggers a frame deletion allows remote attackers to cause a use-after-free DoS (and possibly other impact) via a crafted website. Affected versions are prior to 51.0.2704.63 (and related advis...

OurPHP Backend Web Feature Management SQL Injection Vulnerability

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OurPHP OurPHP management background global column under the website function management module in the configuration of saving the anti-injection processing of the pag...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-03678)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange AppSuite 7.8.0 and...

AVAST (Business) #17 - Persistent Web Vulnerability

Document Title: =============== AVAST Business 17 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1634 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================== 1634 Comm...

Docker UI Cross-Site Request Forgery Vulnerability

Docker is an open source application container engine. A cross-site request forgery vulnerability exists in Docker UI, which can be exploited by an attacker to trick a logged-in user into clicking on a specially crafted malicious url, resulting in a cross-site request forgery attack...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2016-03326)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle. An attacker could exploit...