PT-2018-3631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cdrom ioctl select disc function in the Linux kernel, specifically in the drivers/cdrom/cdrom.c file. It is associated with information disclosure. Exploitati...

openSUSE Security Update : zsh (openSUSE-2018-1094)

This update for zsh to version 5.6.2 fixes the following issues : These security issues were fixed : - CVE-2018-0502: The beginning of a ! script file was mishandled, potentially leading to an execve call to a program named on the second line bsc1107296 - CVE-2018-13259: Shebang lines exceeding 6...

UBUNTU-CVE-2018-17846

The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification...

HPSBHF03593 rev. 2 - Firmware Trusted Platform Module (fTPM) for Select AMD Client Systems

Potential Security Impact Unauthorized access, elevation of privilege. Source: HP, HP Product Security Response Team PSRT Reported By: CTS-Labs VULNERABILITY SUMMARY A security vulnerability has been identified in specific versions of the AMD firmware-based Trusted Platform Module fTPM. The fTPM ...

HDF5 divide by zero error vulnerability (CNVD-2019-03446)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A divide-by-zero error vulnerability exists in the 'H5Dselectio' function of the H5Dselect.c file in HDF5 1.10.3 and earlier...

UBUNTU-CVE-2018-17438

A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

select-moto.ru XSS vulnerability

Open Bug Bounty ID: OBB-675111 Description| Value ---|--- Affected Website:| select-moto.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Remote code execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

PT-2018-13726

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.1 Description The issue allows for PHP code evaluation, potentially leading to pre-authentication remote code execution. This can be achieved via the filter parameter in the "pages/select/" endpoint or the data parameter i...

CVE-2018-16763: Improper Neutralization of Special Elements in Output Used by a Downstream Component

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

PT-2018-13562

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1 Description The issue arises from endless recursion when handling responses from an IAS-ECC card in the iasecc select file function in libopensc/card-iasecc.c. This could be exploited by attackers who can...

OpenSC Infinite Recursion Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. An infinite recursion vulnerability exists in iaseccselectfile in libopensc/card-iasecc.c in OpenSC prior to 0.19.0-rc1 when processing responses from IAS-ECC cards. An attack...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07205)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'tcosselectfile' function in the libopensc/card-tcos.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash...

PT-2018-13543

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1 Description The issue is related to several buffer overflows that occur when handling responses from a TCOS Card in the tcos select file function in libopensc/card-tcos.c. This could be exploited by attacker...

CVE-2018-14621

An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted...

Java System Solutions SSO plugin for BMC MyIT Cross Site Scripting Vulnerability

Java System Solutions SSO plugin for BMC MyIT is a single-sign-on plugin for BMC MyIT from Java System Solutions, UK. A cross-site scripting vulnerability exists in Java System Solutions SSO plugin for BMC MyIT version 4.0.13.1. A remote attacker can exploit this vulnerability to inject client-si...

PT-2018-13065

Name of the Vulnerable Software and Affected Versions BMC MyIT Java System Solutions SSO plugin version 4.0.13.1 Description A Reflected Cross-Site Scripting issue exists, allowing a remote attacker to inject client-side scripts into the select sso function. This is triggered when a victim opens ...

postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE...

select-m.ru XSS vulnerability

Open Bug Bounty ID: OBB-665511 Description| Value ---|--- Affected Website:| select-m.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...