News aggregator

CVE-2015-5079

National Vulnerability Database - Wed, 02/28/2018 - 17:29
Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the dl parameter.
Categories: Security News

CVE-2018-6947

National Vulnerability Database - Wed, 02/28/2018 - 17:29
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.
Categories: Security News

CVE-2015-3898

National Vulnerability Database - Wed, 02/28/2018 - 16:29
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.
Categories: Security News

CVE-2018-7568

National Vulnerability Database - Wed, 02/28/2018 - 16:29
The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.
Categories: Security News

CVE-2018-7569

National Vulnerability Database - Wed, 02/28/2018 - 16:29
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.
Categories: Security News

CVE-2018-7570

National Vulnerability Database - Wed, 02/28/2018 - 16:29
The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.
Categories: Security News

CVE-2018-1304

National Vulnerability Database - Wed, 02/28/2018 - 15:29
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.
Categories: Security News

CVE-2018-1286

National Vulnerability Database - Wed, 02/28/2018 - 13:29
In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.
Categories: Security News

CVE-2016-0291

National Vulnerability Database - Wed, 02/28/2018 - 12:29
IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.
Categories: Security News

CVE-2016-0295

National Vulnerability Database - Wed, 02/28/2018 - 12:29
Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363.
Categories: Security News

CVE-2016-0299

National Vulnerability Database - Wed, 02/28/2018 - 12:29
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.
Categories: Security News

CVE-2018-7264

National Vulnerability Database - Wed, 02/28/2018 - 12:29
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.
Categories: Security News

CVE-2017-9447

National Vulnerability Database - Wed, 02/28/2018 - 10:29
In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences.
Categories: Security News

CVE-2018-7469

National Vulnerability Database - Wed, 02/28/2018 - 10:29
PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field to admin/categories_industry.php (aka Categories - Industry Type).
Categories: Security News

CVE-2017-12191

National Vulnerability Database - Wed, 02/28/2018 - 08:29
A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.
Categories: Security News

Bugtraq: [SECURITY] [DSA 4124-1] lucene-solr security update

SecurityFocus Vulnerabilities - Wed, 02/28/2018 - 03:20
[SECURITY] [DSA 4124-1] lucene-solr security update
Categories: Security News

Bugtraq: [security bulletin] HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service

SecurityFocus Vulnerabilities - Wed, 02/28/2018 - 03:20
[security bulletin] HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service
Categories: Security News

Bugtraq: SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket

SecurityFocus Vulnerabilities - Wed, 02/28/2018 - 03:20
SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket
Categories: Security News

CVE-2018-7477

National Vulnerability Database - Wed, 02/28/2018 - 02:29
SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parent_module/parent_login.php.
Categories: Security News

CVE-2018-7482

National Vulnerability Database - Wed, 02/28/2018 - 02:29
The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files, as demonstrated by a view=media&task=connector&cmd=file&target=l1_../configuration.php&download=1 request. The specific pathname ../configuration.php should be base64 encoded for a valid attack.
Categories: Security News

Pages