man-in-the-middle vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero....

The Gimp Team Gimp 2.0.5 The Gimp Team Gimp 2.2.3 The Gimp Team Gimp 2.2.4

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences....

Crunchify All-in-on-webmaster 7.7.7 Crunchify All-in-on-webmaster 8.0.0 Crunchify All-in-on-webmaster 8.1 Crunchify All-in-on-webmaster 8.2 Crunchify All-in-on-webmaster 8.2.1 Crunchify All-in-on-webmaster 8.2.2 Crunchify All-in-on-webmaster

7.5

CVSSv2

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability...

Oracle Outside In Technology 8.4.0 Oracle Outside In Technology 8.5.1 Oracle Outside In Technology 8.5.2 Oracle Outside In Technology 8.5.3

10

CVSSv2

Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string....

The Palace The Palace Client 3.5

2.1

CVSSv2

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log....

Citrix Vdi-in-a-box 5.3.0 Citrix Vdi-in-a-box 5.3.1 Citrix Vdi-in-a-box 5.3.2 Citrix Vdi-in-a-box 5.3.3 Citrix Vdi-in-a-box 5.3.4 Citrix Vdi-in-a-box 5.3.5 Citrix Vdi-in-a-box 5.4.0 Citrix Vdi-in-a-box 5.4.1 Citrix Vdi-in-a-box 5.4.2

7.5

CVSSv2

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter....

The Merchant Project The Merchant 2.21 EDB exploit available

7.5

CVSSv2

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability...

Oracle Outside In Technology 8.4.0 Oracle Outside In Technology 8.5.1 Oracle Outside In Technology 8.5.2 Oracle Outside In Technology 8.5.3

7.5

CVSSv2

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability...

Oracle Outside In Technology 8.4.0 Oracle Outside In Technology 8.5.1 Oracle Outside In Technology 8.5.2 Oracle Outside In Technology 8.5.3

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the next_template parameter to admin/index.php....

In-portal In-portal

6.8

CVSSv2

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the env parameter....

In-portal In-portal 4.3.11 EDB exploit available

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »