Debian Linux Security Advisory 5454-1 - Riccardo Bonafede discovered that the Kanboard project management software was susceptible to SQL injection.
18eefed3ebe39ff36c87563a57b0277684c2fa9ea2f2a89e2acad4f78ab7abe0Travelable version 1.0 suffers from a persistent cross site scripting vulnerability.
483b7379d6746e29939cfcc3bd586a0761ad1e3adc01b8d25cf71ae711941c91BloodBank version 1.1 suffers from a remote SQL injection vulnerability.
885e03ad394ceda3c223b3e3729ea672c5ac1d3a4a60cdcdda0ad34c82ab4eccUbuntu Security Notice 6184-2 - USN-6184-1 fixed a vulnerability in CUPS. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or to possibly obtain sensitive information.
5dde86b9848b107dfcc1a3f6aa9837a89257faec56147e2a4e53f34c981b423eBloodBank version 1.1 suffers from a cross site scripting vulnerability.
5db5ccaaad3706e658aa7d6ba137a4f86d3956c446eb34b6fc8401be0a9baac1Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.
df029dc1108b3c1ce369d55984b0647627eb0377597a1b9b8a9ee71c519fdb88Carlisting version 1.6 suffers from a cross site scripting vulnerability.
4ec181d6b85fc3d05a555ef234e32019e6d9f8dd20b59b656b08d458885e1b60Pluck version 4.7.18 suffers from a remote code execution vulnerability.
a1df3ebdcab288690dba75419430ea432d182aca5d0d0433c493775cb8f03fa8Carlisting version 1.6 suffers from a remote SQL injection vulnerability.
e43c9d8ff0df6541a7979729a8557599a209f31b2cfa1fcad687285ea8d229c3RecipePoint version 1.9 suffers from a remote SQL injection vulnerability.
efe0b12f3af82a40d847cecea7a51367fa0fd4ff5036bb56424eb3bac86690cdCisco UCS-IMC Supervisor version 2.2.0.0 suffers from an authentication bypass vulnerability.
c0df6de9e534c3f016f39f3ff4009a188e694f0c3406df8e82ba6d4ca7e930dcDebian Linux Security Advisory 5453-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
bf03cf19fdf1082113457772d76c670410af49159578fbd829b09a42c7d23d6dLawyer CMS version 1.6 suffers from a cross site scripting vulnerability.
5a8f273350ce7448ce2f5fe5ae41ba57b570fefb6b4ba4eccdc73dd5766efae1JobSeeker version 1.5 suffers from a cross site scripting vulnerability.
4424ea8cde82412153da91334ad4f489aab8447aa969c5f0b82cc0b53f5ffa63News Portal version 4.0 suffers from a remote SQL injection vulnerability.
1e39667f0de01587dd58d64ed7b74d13a33d2a4c6f753c5fa1f6fb54b60594c4Ecommerce version 1.15 suffers from a cross site scripting vulnerability.
190a59e336d8a023c8ad3ec1a90f3fead051893935012a4e7ca5dbbfc40bf78aInsurance version 1.2 suffers from a cross site scripting vulnerability.
9dd8f0eb8a0797dc78cc70a3788af8a1974d428676692ac1cffbd204ab5d9c9dDebian Linux Security Advisory 5452-1 - Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code.
a1ee0c8d90ac76d89cdd49ff389b345294fe876a88a5a4fc78a294ba786df213ProjeQtOr Project Management System version 10.4.1 suffers from multiple cross site scripting vulnerabilities.
9f904699dd3ce2353c3d41ed97e67a207dfd8884e51077d5f0b96123d15441e0MineStack version 1.0 suffers from a persistent cross site scripting vulnerability.
f80f88a99118b44212cfcc3d7f8339f331c5d795fec330391f2c8609ee473eb1EX-RATE version 1.0 suffers from a persistent cross site scripting vulnerability.
4b88d29d86e56a3602df2bc9ebaff0ae49e4183369d402e70a10830629debb41WinterCMS versions prior to 1.2.3 suffer from a persistent cross site scripting vulnerability.
7a05cd2580573d203dca43e892b3cf251579da502950237b74a493130870eb20Montage version 1.0 suffers from a persistent cross site scripting vulnerability.
5fc9b4f6d1298788a12df12cc9f2e70f4b311e7b0429455ad89914c614f3700fWedding Wonders version 1.0 suffers from a persistent cross site scripting vulnerability.
75e85a177f35537ada34f88ab0a6b0509ef2394a025bd941c73edca1767dc941Admidio version 4.2.10 suffers from a remote code execution vulnerability.
f11ce6c5abc0a0c5eb3cc50b6ab9f8f7c9ec3559b51c129eb57b52b4d3e16ada
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed