347 matches found
EMC RSA BSAFE Micro Edition Suite TLS Man-in-the-Middle Attack Vulnerability
EMC RSA BSAFE Micro Edition Suite MES is an encryption toolkit from EMC Corporation. The toolkit helps developers achieve stable and secure application design.TLS Transport Layer Security is a set of protocols used to provide confidentiality and data integrity between two communicating...
LOCKON EC-CUBE Cross-Site Request Forgery Vulnerability (CNVD-2016-02684)
LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A cross-site request forgery vulnerability exists in LOCKON EC-CUBE versions 3.0.0 through 3.0.9. An attacker can...
LOCKON EC-CUBE Access Privilege Vulnerability (CNVD-2016-02686)
LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. An access privilege vulnerability exists in LOCKON EC-CUBE versions 3.0.0 through 3.0.9. A remote attacker can exploi...
UBUNTU-CVE-2016-4052
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes ESI responses...
Casebook plugin cross-site scripting vulnerability
Casebook plugin for baserCMS is a casebook plugin for baserCMS. A cross-site scripting vulnerability exists in Casebook plugin for baserCMS versions prior to 0.9.4, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to authenticate as an arbitrary user.
The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass authentication by acting as an arbitrary user...
X2Engine X2CRM Cross-Site Scripting Vulnerability
X2Engine X2CRM is the United States X2Engine company's set of open source customer relationship management program CRM. A cross-site scripting vulnerability exists in X2Engine X2CRM versions prior to 5.0.9. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the net-snmp-devel-5.0.9 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
PYSEC-2015-34
The buildindexfromtree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree...
BELL-CVE-2014-8709 CVE-2014-8709 does not affect BellSoft software
Bulletin has no description...
httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...
PT-2011-1125 · Red Hat · Libvirt-Devel +5
Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 0.9.0 libvirt-debuginfo versions 0.8.1 libvirt-devel versions 0.8.1 libvirt-python versions 0.8.1 libvirt-client versions 0.8.1 Description: The issue affects the libvirt package in Red Hat Enterprise Linux,...
security flaw
Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code while Ethereal is parsing keysyms...
2021-06 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB5003778)
2021-06 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 KB5003778...
2021-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 (KB4601556)
2021-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 KB4601556...
2019-09 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4522012)
2019-09 Cumulative Update for Windows 10 Version 1709 for x64-based Systems KB4522012...
2022-02 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 (KB5011267)
2022-02 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 KB5011267...
2025-05 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5061978)
2025-05 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5061978...