Design/Logic Flaw

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003: Improper Neutralization of Input During Web Page Generation

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

PT-2017-16822

Name of the Vulnerable Software and Affected Versions dotCMS version 3.7.0 Description The issue allows for XSS, which is reachable from ext/languages manager/edit language in portal/layout via the bottom two form fields. Recommendations For dotCMS version 3.7.0, at the moment, there is no...

CVE-2017-6909: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Shimmie = 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "shimmie2-master/ext/chatbox/history/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

PT-2017-17409

Name of the Vulnerable Software and Affected Versions Shimmie versions prior to 2.5.1 Description The issue is caused by insufficient filtration of user-supplied data passed to the "shimmie2-master/ext/chatbox/history/index.php" URL, allowing an attacker to execute arbitrary HTML and script code ...

PT-2017-2906

Name of the Vulnerable Software and Affected Versions Atlassian SourceTree versions 2.5c and prior Description The issue exists due to a lack of neutralization of special elements used in operating system commands. Exploitation may allow a remote attacker to execute arbitrary commands by...

PT-2017-16709

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-ugly affected versions not specified Description The issue allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving extended content descriptors. This is due to a problem in the g...

PT-2017-16708

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is related to the number of languages in a video file, specifically involving th...

PT-2017-7776

Name of the Vulnerable Software and Affected Versions PHP versions 7.0.0 through 7.0.14 PHP versions 7.1.0 through 7.1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This occurs when an inapplicable clas...

CVE-2016-10162: NULL Pointer Dereference

The phpwddxpopelement function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a...

CVE-2016-10161: Out-of-bounds Read

The objectcommon1 function in ext/standard/varunserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service buffer over-read and application crash via crafted serialized data that is mishandled in a finishnesteddata call...

CVE-2016-10160: Off-by-one Error

Off-by-one error in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch...

CVE-2016-7480

The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service uninitialized memory access via crafted serialized data...

CVE-2016-7480: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service uninitialized memory access via crafted serialized data...

PT-2017-16439

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.3.26 GnuTLS versions 3.5.x prior to 3.5.8 Description A double free vulnerability exists in the gnutls x509 ext import proxy function, allowing remote attackers to have an unspecified impact via crafted policy langua...

CVE-2016-9137

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

CVE-2014-9912

The geticudispvaluesrcphp function in ext/intl/locale/localemethods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service buffer overflow or possibly have...

CVE-2016-9934

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

CVE-2016-9936

The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834...