| Title |
Multiple Vulnerabilities In SugarCRM
|
| Info |
Sugar Sales Professional is the solution for companies who use Sugar Sales in a production environment for
mission-critical sales knowledge management. Sugar Sales Professional is a visible source CRM application
that offers more features than the open source application. It also includes support by SugarCRM staff.
Sugar Sales Professional expands the open source application benefits so that your company experiences better
performance, integration and support. Multiple vulnerabilities (some high risk) have been discovered in SugarCRM.
A recet version was released recently, and was believed to include security fixes, but several of the vulnerabilities
still exist in the recently released version 2.0 |
| Date |
December 1, 2021 |
| BID |
11740
|
| Credit |
James Bercegay |
| Title |
dbPowerAmp Buffer Overflow And DoS Vulnerabilities
|
| Info |
Often called the Swiss Army knife of audio, dMC can digitally
rip sound from audio CDs to a multitude of formats. Convert
from one format to another while preserving ID tags. Nearly
every audio type is supported, including MP3, MP4, Windows Media
Audio (WMA), OGG Vorbis, AAC, Monkey's Audio, and FLAC (with
optional installs from Codec Central). For Windows Explorer
integration, right-click Convert To to pop up useful information
on audio files (such as bit rate and length). Record from LPs with
an optional Auxiliary Input install. dBpowerAmp Audio Player (dAP)
has a digital conditioning equalizer and an advanced music
collection. It's skinnable and has a cross-fader, a playlist
editor, and a tag editor. dAP plays MP3s, WMA, Ogg Vorbis, Monkeys
Audio, Real Audio, WAV, MIDI, and many more. These programs are vulnerable to buffer overflow as well as denial of service vulnerabilities. |
| Date |
September 27, 2021 |
| BID |
11266
|
| Credit |
James Bercegay |
| Title |
Multiple Vulnerabilities In EmuLive Server4
|
| Info |
Server4 is real-time media broadcasting software that works
in conjunction with Emulive producer software to create
digital television-like channels on the Internet. To web
browsers, Server4 appears as a standard web server. Visitors
to a Server4 system can browse and view available channels,
chat with other users, remotely control cameras, remotely
control devices, create user accounts, extend user accounts,
purchase time and access controlled subscriptions, purchase
one-to-one exclusive conferences, tip channel hosts, purchase
additional time and more. Server4 is prone to unauthorized remote administrative access as well as a vulnerability that will allow an attacker to crash a Server4 instalattion remotely. Proof Of Concept code is included. |
| Date |
September 20, 2021 |
| BID |
11226
|
| Credit |
James Bercegay |
| Title |
RhinoSoft DNS4ME HTTP Server Vulnerabilities
|
| Info |
DNS4Me is the dynamic DNS service that you need to
start hosting your own Internet services. When you have
a dynamic IP address, you need something to associate a
static domain name with it to make it easier for visitors
to access the services you provide. With DNS4Me, you can
take control of your Web site by running your own HTTP
server. Without a hosting company, you've eliminated the
cost of hosting as well as a layer of contact between you
and your Web site. This gives you unparalleled control
overits configuration, content, and delivery. But the
benefits of dynamic DNS aren't just for HTTP servers. Any
service that can make use of a domain name can benefit from
DNS4Me. This includes FTP servers, e-mail servers, daemons
for today's popular computer games, NetMeeting… With the
reliability and excellent support you've come to expect of
RhinoSoft.com backing up DNS4Me, you'll get a powerful, no
hassle dynamic DNS solution. The RhinoSoft DNS4ME HTTP server
is prone to multiple vulnerabilities, and users are encouraged
to upgrade as soon as possible.
|
| Date |
September 16, 2021 |
| BID |
11213
|
| Credit |
James Bercegay |
| Title |
Multiple Vulnerabilities In phpWebsite
|
| Info |
phpWebSite provides a complete web site content management
solution. All client output is valid XHTML 1.0 and meets the
W3C's Web Accessibility Initiative requirements. Currently
features: announcement posting, form generator, user
management with granulated administration, calendar, poll,
faq, photoalbum, bulletin board, rss feeds, user
customizable theme support and more. It is one of the most
popular content managment systems in the world. However, it
is vulnerabile to a number of attacks, some of which allow an
attacker to completely take control of a vulnerable phpWebsite
installation. Other vulnerabilties in phpWebsite include script
injection, SQL injection, forced command execution, and cross
site scripting. A security update is available and all phpWebsite
users should upgrade their installation as soon as possible. |
| Date |
August 31, 2021 |
| BID |
11088
|
| Credit |
James Bercegay |
|
