PT-2019-16200

Name of the Vulnerable Software and Affected Versions Android version 10 Description The issue is related to a missing bounds check in the ihevcd ref list function of ihevcd ref list.c, which could lead to an out of bounds write. This might result in remote code execution without requiring...

CVE-2019-2095

In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

Libav Buffer Overflow Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A buffer overflow vulnerability exists in the 'ffh264executerefpicmarking' function of libavcodec in Libav version 9.21. The vulnerability stems from a networked...

PT-2019-8583

Name of the Vulnerable Software and Affected Versions Libav version 9.21 Description The issue is related to a heap-based buffer over-read in the ff h264 execute ref pic marking function within the libavcodec component of Libav. Recommendations For Libav version 9.21, at the moment, there is no...

UBUNTU-CVE-2018-20509

The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref desc node" lines in a debugfs file...

PT-2019-10097

Name of the Vulnerable Software and Affected Versions: Linux kernel version 4.14.90 Description: The issue concerns the print binder ref olocked function in the Linux kernel, which allows local users to obtain sensitive address information. This is achieved by reading specific lines in a debugfs...

CVE-2018-9451

In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

ref-fr.ch XSS vulnerability

Open Bug Bounty ID: OBB-642436 Description| Value ---|--- Affected Website:| ref-fr.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ref-kirche-oe.ch XSS vulnerability

Open Bug Bounty ID: OBB-634296 Description| Value ---|--- Affected Website:| ref-kirche-oe.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ref-fr.ch XSS vulnerability

Open Bug Bounty ID: OBB-613804 Description| Value ---|--- Affected Website:| ref-fr.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OracleVM 3.4 : xen (OVMSA-2018-0039)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=b68fb6eb2d74ac16bb1e733c5fe5c9d9622b0838 - BUILDINFO: QEMU upstream...

ref-hunters.ch XSS vulnerability

Open Bug Bounty ID: OBB-582391 Description| Value ---|--- Affected Website:| ref-hunters.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-5518

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to an out-of-bounds write in the ih264d ref idx reordering function of libavc. This could potentially lead to remote code execution without requiring additional execution...

CVE-2018-5766

In Libav through 12.2, there is an invalid memcpy in the avpacketref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted avi file...

ref-bux.com XSS vulnerability

Open Bug Bounty ID: OBB-466823 Description| Value ---|--- Affected Website:| ref-bux.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-17737

The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...

CVE-2017-17737

The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...

CVE-2017-17737

The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...

PT-2017-14977

Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 device versions 6.2.63 and below Description The issue concerns a problem where an attacker can execute malicious scripts. The estimated number of potentially affected devices worldwide is not specified. Detail...

CVE-2017-17737: Improper Neutralization of Input During Web Page Generation

The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...