ImpressCMS cross-site scripting and local File Inclusion Vulnerability

Release date: 2012-10-08Updated on: 2012-10-09 Affected Systems:ImpressCMS 1.3 FinalDescription:--------------------------------------------------------------------------------Bugtraq id: 51268Cve id: CVE-2012-0987 ImpressCMS is a content

3G Protocol 1 vulnerability may cause users to be tracked

Recently, the University of Birmingham security research team found that 3G mobile phones have a vulnerability that allows users to be easily tracked. No effective patch software is available to fix this issue. We all know that the 3G network

PhpPaleo 'lang 'Parameter Local File Inclusion Vulnerability

Release date: 2012-03-16Updated on: Affected Systems:Sourceforge phpPaleoDescription:--------------------------------------------------------------------------------Bugtraq id: 52530Cve id: CVE-2012-1671 PhpPaleo is an open source php project for

PhpMyDirectory 'page. php' SQL Injection Vulnerability

Release date:Updated on: Affected Systems:PhpMyDirectory.com phpMyDirectory 1.3.3PhpMyDirectory.com phpMyDirectoryDescription:--------------------------------------------------------------------------------Bugtraq id: 51342 PhpMyDirectory is a

IBM Tivoli Federated Identity Manager Console Access Vulnerability

Release date:Updated on: Affected Systems:IBM Tivoli Federated Identity Manager 6.xIBM Tivoli Federated Identity Manager Business Gateway 6.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56391

WordPress post-views plug-in "search_input" Cross-Site Scripting Vulnerability

Release date:Updated on: Affected Systems:WordPress post-views Plugin 2.xDescription:--------------------------------------------------------------------------------WordPress is a Blog (Blog, Blog) engine developed using the PHP language and MySQL

Novell File Reporter 'NFRAgent.exe 'Heap Buffer Overflow Vulnerability

Release date:Updated on: 2012-11-19 Affected Systems:Novell File Reporter Agent 1.0.2Description:--------------------------------------------------------------------------------Bugtraq id: 56579Cve id: CVE-2012-4956 Novell File Reporter is a

Open-source program Piwik is implanted with malicious code

Hackers intrude into the Web server of the open source analysis software Piwik and implant malicious code. The project maintainer issued a warning to the user who downloaded and installed Piwik 1.9.2 on Monday. Versions downloaded from UTC to UTC on

Ektron CMS '{compiledtransform' Remote Code Execution Vulnerability

Release date:Updated on: 2012-12-07 Affected Systems:Ektron CMS 8.02.Unaffected system:Ektron CMS 8.02 Service Pack 5Description:--------------------------------------------------------------------------------Bugtraq id: 56816CVE (CAN) ID: CVE-2012-5

Wireshark iSCSI parser Infinite Loop Vulnerability

Release date:Updated on: 2012-12-01 Affected Systems:Wireshark 1.xDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2012-5598 Wireshark (formerly known as Ethereal) is a very popular open-

FCKEditor 'fileupload () 'Function Arbitrary File Upload Vulnerability

Release date:Updated on: 2012-12-01 Affected Systems:FCKeditor 2.6.8Description:--------------------------------------------------------------------------------Bugtraq id: 56735 FCKeditor is an open source HTML text editor. FCKEditor 2.6.8 and

Multiple Oracle OpenSSO HTML Injection Vulnerabilities

Release date:Updated on: 2012-12-02 Affected Systems:Oracle OpenSSODescription:--------------------------------------------------------------------------------Bugtraq id: 56733 The OpenSSO project is an open-source implementation of SSO (Single

Multiple security vulnerabilities in IBM Lotus Symphony

Release date:Updated on: 2012-4 4 Affected Systems:IBM Lotus Symphony 3.0.1IBM Lotus Symphony 3.0.0Description:--------------------------------------------------------------------------------Bugtraq id: 56755 IBM Lotus Symphony is a free office

Cisco DPC2420 module configuration file leakage/persistent XSS/Weak Authentication Encryption Vulnerability

Release date:Updated on: Affected Systems:Cisco DPC2420 D2425-P10-13-v202r12811-110511Cisco DPC2420Description:--------------------------------------------------------------------------------Bugtraq id: 56868 Cisco DPC2420 is a wireless router

Centreon 'menu 'parameter SQL blind Injection Vulnerability

Release date:Updated on: Affected Systems:Centreon Description:--------------------------------------------------------------------------------Bugtraq id: 56911CVE (CAN) ID: CVE-2012-5967 Centreon is an open-source software used to work with nagios.

OpenStack Keystone/etc/keystone/ec2rc key leakage Vulnerability

Release date:Updated on: Affected Systems:Openstack Keystone 2012.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56888CVE (CAN) ID: CVE-2012-5483 OpenStack Keystone is a project that provides

Linux Kernel Btrfs CRC32C function infinite loop Local Denial of Service Vulnerability

Release date:Updated on: Affected Systems:Linux kernel Description:--------------------------------------------------------------------------------Bugtraq id: 56939CVE (CAN) ID: CVE-2012-5374 Linux Kernel is the Kernel of the Linux operating

SSL certificate verification security vulnerability in versions earlier than Opera Web Browser 12.10

Release date:Updated on: Affected Systems:Opera Software Opera Web Browser Description:--------------------------------------------------------------------------------Bugtraq id: 57121CVE (CAN) ID: CVE-2012-6461 Opera is a browser from Norway that

SQL injection vulnerability found in all Ruby On Rails versions

According to a post posted On the Ruby On Rails Security Forum, all versions of the Ruby On Rails Web framework have an SQL injection vulnerability that allows attackers to inject code into Web applications. Ruby on Rails is widely used to develop

Ruby on Rails insecure query generation Vulnerability

Release date:Updated on: Affected Systems:Ruby on Rails 3.xRuby on Rails 2.3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57192CVE (CAN) ID: CVE-2013-0155 Ruby on Rails (RoR or Rails) is

Total Pages: 1330 1 .... 892 893 894 895 896 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.