Browse CVEs

CRITICAL 9.8 CVE-2016-9125 Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not inva… Revive Adserver after 3.2.2 Fix from $2,3002017-03-28 HIGH 8.8 CVE-2016-9127 Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password recovery form in Revive Adserver is vulnerable to CSRF atta… Revive Adserver after 3.2.2 Fix from $1,9502017-03-28 HIGH 8.8 CVE-2016-9455 Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable t… Revive Adserver after 3.2.2 Fix from $1,9502017-03-28 HIGH 8.8 CVE-2016-9456 Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interfa… Revive Adserver after 3.2.2 Fix from $1,9502017-03-28 MEDIUM 5.4 CVE-2016-9126 Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboar… Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 MEDIUM 5.4 CVE-2016-9128 Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This … Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 MEDIUM 5.4 CVE-2016-9130 Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requirin… Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 MEDIUM 5.4 CVE-2016-9454 Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requirin… Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 MEDIUM 5.4 CVE-2016-9457 Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that ar… Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 MEDIUM 5.3 CVE-2016-9129 Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was assoc… Revive Adserver after 3.2.2 Fix from $1,6002017-03-28 CRITICAL 9.8 CVE-2017-5830 Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts. Revive Adserver after 4.0.0 Fix from $2,3002017-03-03 MEDIUM 6.1 CVE-2017-5833 Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attac… Revive Adserver after 4.0.0 Fix from $1,6002017-03-03 MEDIUM 5.9 CVE-2017-5831 Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers… Revive Adserver after 4.0.0 Fix from $1,6002017-03-03 MEDIUM 5.4 CVE-2017-5832 Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via… Revive Adserver after 4.0.0 Fix from $1,6002017-03-03 HIGH 7.5 CVE-2015-7372 Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary loc… Revive Adserver after 3.2.1 Fix from $1,9502015-10-14 MEDIUM 5.0 CVE-2015-7371 Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possib… Revive Adserver after 3.2.1 Fix from $1,6002015-10-14 HIGH 7.5 CVE-2015-7369 The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows re… Revive Adserver after 3.2.1 Fix from $1,9502015-10-14 HIGH 7.5 CVE-2015-7367 Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) de… Revive Adserver after 3.2.1 Fix from $1,9502015-10-14 MEDIUM 6.8 CVE-2015-7366 Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of use… Revive Adserver after 3.2.1 Fix from $1,6002015-10-14 MEDIUM 6.8 CVE-2015-7364 The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an empty tok… Revive Adserver after 3.2.1 Fix from $1,6002015-10-14 MEDIUM 6.8 CVE-2014-9407 Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.0.5 allow remote attackers to hijack the authentication of adm… Revive Adserver after 3.0.4 Fix from $1,6002014-12-19 MEDIUM 5.0 CVE-2014-8875 The XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote attackers to cause a denial of service (CPU and memory … Revive Adserver after 3.0.5 Fix from $1,6002014-12-19 MEDIUM 6.8 CVE-2013-5954 Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of adminis… Revive Adserver after 3.0.4 Fix from $1,6002014-04-25