PHPShell version 2.4 suffers from a cross site scripting vulnerability.
cf22fd3a11acd8a87212084f0f6ec357c2ca41fc07194b210d7f8bb35b1375efPHPShell version 2.4 suffers from a session fixation vulnerability.
4d3e68fa934c658be060dde83430cd5e40c88c9284c159ca2afcfe12baa190cdSawmill Enterprise version 8.7.9 suffers from a pass the hash authentication bypass vulnerability.
4ec37a5fba7ff5d5049378040529b7e29ae139de91bba8fcd368bb610ca66a39Ubuntu Security Notice 3202-1 - Frediano Ziglio discovered that Spice incorrectly handled certain client messages. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code.
48b335caa3db2e8cecc79f87924e6e7b7ef20b603e40720f1f3f109a03a9d3afUbuntu Security Notice 3203-1 - It was discovered that gtk-vnc incorrectly validated certain data. A malicious server could use this issue to cause gtk-vnc to crash, resulting in a denial of service, or possibly execute arbitrary code.
6c58dfec8d09852c5bf6261c22dcb2332232e0c2a285cf29b44c1e453ec62204Ubuntu Security Notice 3204-1 - It was discovered that Tomcat incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to cause Tomcat to consume resources, resulting in a denial of service.
88d15946d2c7ca6641b2b0d9ab6a3032e893c12ef0b833c14b96a392bf4498f8Red Hat Security Advisory 2017-0286-01 - OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength general-purpose cryptography library. Security Fix: An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.
263e10e25244071ae6bff5440a09981e5d4c03c3e8382ee37d122e6f44fcaee2Gentoo Linux Security Advisory 201702-12 - Multiple vulnerabilities have been found in MuPDF, the worst of which allows remote attackers to execute arbitrary code. Versions less than 1.10a-r1 are affected.
b5b498264a2f4a5e1823126da1134199b8ce2c43ccf54d288bb0e6623f948020Gentoo Linux Security Advisory 201702-11 - Multiple vulnerabilities have been found in the GNU C Library, the worst of which allows context-dependent attackers to execute arbitrary code. Versions less than 2.23-r3 are affected.
fa2a94198c76126434e575483adb24e98f6fc6067b9bede81d1fab17552eb3e5Gentoo Linux Security Advisory 201702-10 - A vulnerability in NTFS-3G allows local users to gain root privileges. Versions less than 2016.2.22-r2 are affected.
ee4509abb8d07659fe187c08f1cf8070767d055822625eb1de9ade54c1d6e459Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability.
1bdcdf872682c6a8e387d635635f411aae430a4d02c2aab5cdda9cc98c8bcdd4Joomla EShop component version 2.5.1 suffers from a remote SQL injection vulnerability.
fd594d9030d831a6077707baf40cddb4bab7ea4e7597a5e477c6b63110d38fe9Joomla PayPal IPN for Docman component version 3.1 suffers from a remote SQL injection vulnerability.
50b95e2fbaf42c1b6c94ae0a64a2c01d6f2e285c1fd0169b968e204824a7b743Joomla JMS Support Online Module component version 3.6.5 suffers from a cross site scripting vulnerability.
eae018801eae842408a2605b94fdd00002efad9133ce39cb1a797bdf86ac7fddTelekom Cloud SSO suffers from multiple persistent cross site scripting vulnerabilities.
9b845cf7e45661a9944a99ff8baa1ddd21f6f9e73b8b8f0a37cb68557fb66dd8Lithium Forum suffers from an SSRF vulnerability.
47c31b0017b21e98e94fcdc6b40a2568424ac6f89761d2f727ab403c3a1d3c7cJoomla Maxcomment component version 1.6 suffer from a remote SQL injection vulnerability.
38cfed519790c3a026d86e37e1408cd266a1d57caba956d1513fd6c72b246436Joomla MaQma Helpdesk component version 4.2.7 suffers from a remote SQL injection vulnerability.
75140fa2023fc319af42873f910e9d200f054c1d9d441daaa3c6a2cfd1eabbf0Joomla Topics component version 1.6 suffer from a remote SQL injection vulnerability.
9d7e890edba337a374aa04fc2d7e57c25f2afcdfed45d0f7a37bc9689d135f9cJoomla DCRC component version 1.6 suffer from a remote SQL injection vulnerability.
25d77edddcd0ba6c19cc2a12170e2d4d7f4d67764bc1a25782275759e2537533Joomla Docman component version 1.6 suffer from a remote SQL injection vulnerability.
a33fe436a8f68f30bbe67f6a66349e20c13fffa14b9069ef0c8410514e039563Joomla View Content component versions 1.5 and 1.6 suffer from a remote SQL injection vulnerability.
8947e05fe8e0eeda3958334060cb1a09c862e2d9501d625f0d11b8daa48f1a44
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed