Netgear WNDRMAC versions 1.0.0.22 and below suffer from a serial number disclosure vulnerability.
664bd8ae2a0cd1c838915a72e05bf722f27b543f881fd63debb15589291aab4cSOS JobScheduler version 1.13.3 encrypts a secret by simply using the name of a profile as the key, making it trivial to decrypt.
fe2cf7ab1a965708745f8a3ccea8786f1c5edbfe5c3b8ab23a4f225c60f669afGoogle Active Directory Sync (GADS) Tool versions 3.1.3 and below suffer from a local information disclosure vulnerability.
5af6fac3359b45806a514cce9e316949ac1c763760a0a252335bc60361e5db98SilverStripe version 3.0.2 suffers from cross site request forgery and cross site scripting vulnerabilities.
5cb762b339a330f6095d9df36320aed93b37bcf830588eaba27f260b27da40fbFileBound On-Site versions prior to 6.2 suffer from a remote privilege escalation vulnerability due to a faulty control validating password requests.
8e56b4f4c9544dd8530de39fc0101066f47f4c720e156e0793d6aa0ddffaf44aEktron CMS version 8.5.0 suffers from unauthenticated file upload and XXE injection vulnerabilities.
aec2ac7f32fa1685fd5e487de3e2ea551d1c03b5a65c07c2695b12fd0654d18eElcom Community Manager versions 7.4.10 from Elcom CMS suffers from a remote shell upload vulnerability.
401ff74fdfc536a8f3c29661cb406b10fe55203d159972a2634931d9a52b3349Squiz CMS version 4.6.3 suffers from cross site scripting and XXE injection vulnerabilities.
a5d045b3aad07ff6c6442d788cf3530feb8b0422a99a5af1dae6dda396024529QNAP Turbo NAS with firmware versions 3.6.1 Build 0302T and below suffer from a command injection vulnerability that allows for remote code execution.
bcec74851c024f2e1466935f495fd1687810e39d50b44f12aa001bc14964e143Secunia Security Advisory - Jason Edelstein has reported a vulnerability in NetGear WNDRMAC, which can be exploited by malicious people to disclose sensitive information.
4f4d0d4821715286cf4146e251818b0519a10b9edbc7d757fcc20e873e47ce62Aurora WebOPAC suffers from a remote SQL injection vulnerability. Versions affected include 3.5.0e, 3.4.6a, 3.5.3, 3.5.0i, 3.4.7b, 3.5.2.2, 3.4.7b, and possibly others.
c2953c142e76ad17f190004540861518022a43999ae0d3e8793ef9f6ce681036Iciniti Store version 4.3.3683.31484 suffers from a remote SQL injection vulnerability.
468555f310e3babc2bec1e782bf7364b99eadd7c132f25fc01ef86f9aef13b79The XMLEncoder component of Symfony version 2.0.x fails to disable external entities when parsing XML. In the Symfony2 framework the XML class may be used to deserialize objects or as part of a client/server API. By using external entities it is possible to include arbitrary files from the file system. Any application written in Symfony2 that parses user supplied XML is affected.
41c5e9ed24bcfedc86e11b0fbb5e857209c2e898342bd3b498a8707a5985fdadAll versions of Snom IP Phone prior to 8.4.35 suffer from a privilege escalation vulnerability.
9e5b6063e0a97f160456f3011fab1f5a1ffe250662f024fd27b0438d6244a154WordPress plugin BackWPup version 2.1.4 suffers from a remote code execution vulnerability.
e8922fa4c7addf7e093d643ed4e3247a3aeeba16d61549f286d287b09cde8758The NETGEAR Wireless Cable Modem Gateway model CG814WG suffers from authentication bypass, cross site request forgery, and other vulnerabilities.
ca0cb4ca523d4b1ed566b694edcda33f3ed5049b521a2b8f296b638be22fb96eCisco TelePresensce Series suffers from client-side code execution, denial of service, cookie theft, loss of confidentiality, and impersonation vulnerabilities.
bc7f59652d2d33927b5be11b22f77d5545fd6efa01646d0cc73f14ea610a6d87Oracle Sun GlassFish Enterprise Server version 2.1.1 suffers from a cross site scripting vulnerability. Proof of concept code included.
e852d78319b40a191a8aa9ea6c5cefd12cf9f11cf487cae2ce22d9f26df1275bPHPCaptcha / Securimage versions 1.0.4 through 2.0.2 suffer from an authentication bypass vulnerability. Proof of concept code included.
241cf163dd08c5ba7d4da72cdecbbb268ce65adffc9dc6337e5656dedb08a513Cisco Unified Operations Manager suffers from cross site scripting, remote SQL injection, and directory traversal vulnerabilities. Versions 8.0 and 8.5 are affected.
d6733640509f4e53a13a0029f841b353ff1086c5280643834acf286ecbf3b8bcProofpoint Protection Server version 5.5.5 suffers from a cross site scripting vulnerability.
412f53f289503ca09e6bb76b8fe8c5f67ba8e41e4c5e459c8514b9e1b2603ba2Collaborative Passwords Manager (cPassMan) version 1.82 suffers from an arbitrary file download vulnerability.
967826b2fe42669cdbb86c278cdcd41df4089bd07c90acbcb696c66c58c57b9fThe WordPress BackWPup plugin version 1.6.1 suffers from a vulnerability that allows for local or remote code to be executed.
9d1296daa3ec8fb23564f12b35f8a9259718b647bc906c9344ec6687a2bdcfa6Elcom CommunityManager.NET suffers from an authentication bypass vulnerability. Proof of concept code is included. Version 6.7 is vulnerable.
7acb1f10e416f67bc4734d295a385802936a471c97a267dd98e74911fcfd8dbcAdobe Reader version 9.3.4 is vulnerable to multiple memory corruption vulnerabilities. By sending specially crafted PDF files it is possible to cause memory corruption in the 3difr and AcroRd32.dll modules. Both issues trigger a null pointer condition which results in an access violation. The issue in AcroRd32.dll is triggered when Adobe Reader is closed.
8cc088f240fc45c266a250afb545cea36a5bbe247a4e721a59aa2a79ae7d9a37By sending a specially crafted request followed by a reset packet it is possible to trigger a vulnerability in Apache 2.2.14 mod_isapi that will unload the target ISAPI module from memory. However function pointers still remain in memory and are called when published ISAPI functions are referenced. This results in a dangling pointer vulnerability. Successful exploitation results in the execution of arbitrary code with SYSTEM privileges.
90f73578fb832e46f16d36335ab9911e89d608d85ddf6502b6fd7c3f8e006935
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed