Security
Headlines
HeadlinesLatestCVEs

Source

Packet Storm

ApnaTrademark CMS 2.5 SQL Injection

ApnaTrademark CMS version 2.5 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Packet Storm
#sql#vulnerability#windows#google#php#auth
Allhandsmarketing CMS 3.01 SQL Injection

Allhandsmarketing CMS version 3.01 suffers from a remote SQL injection vulnerability.

Car Rental Script 1.8 Cross Site Scripting

Car Rental Script version 1.8 suffers from a cross site scripting vulnerability.

Ubuntu Security Notice USN-6196-1

Ubuntu Security Notice 6196-1 - It was discovered that ReportLab incorrectly handled certain PDF files. An attacker could possibly use this issue to execute arbitrary code.

Ubuntu Security Notice USN-6195-1

Ubuntu Security Notice 6195-1 - It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. It was discovered that Vim did not properly manage memory when freeing allocated memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. It was discovered that Vim contained a heap-based buffer overflow vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Allhandsmarketing LMS 2.0 Cross Site Request Forgery

Allhandsmarketing LMS version 2.0 suffers from a cross site request forgery vulnerability.

Advanced HRM 1.6 Insecure Direct Object Reference

Advanced HRM version 1.6 allows for the reseting of the administrative password.

ADMINA BULGARIA Ltd 1.0 Insecure Settings

ADMINA BULGARIA Ltd version 1.0 appears to leave default credentials installed after installation.

Active Super Shop 1.5.1 HTML Injection

Active Super Shop version 1.5.1 suffers from an html injection vulnerability.