3639 matches found
CVE-2019-18383: Missing Authorization
An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...
kernel security and bug fix update
3.10.0-1062.4.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.4.1 - vhost vhost: make sure lognum innum Eugenio Perez 1750879 1750880...
CVE-2016-10951
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
Sql injection
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
CVE-2016-10951
CVE-2016-10951 affects the WordPress plugin fs-shopping-cart (version 2.07.02). The vulnerability is an SQL injection via the pid parameter, demonstrated by PoCs showing unescaped input in the admin context (e.g., UNION SELECT payloads). Connected documents corroborate an authenticated SQL inject...
CVE-2016-10951
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
PT-2019-7744
Name of the Vulnerable Software and Affected Versions fs-shopping-cart plugin version 2.07.02 for WordPress Description The issue is related to SQL injection via the pid parameter. This allows for potential exploitation. Recommendations For fs-shopping-cart plugin version 2.07.02, consider...
CVE-2016-10951: Improper Neutralization of Special Elements used in an SQL Command
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
PT-2019-4255
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.12 Description The issue is related to a NULL pointer dereference in the btrfs root node function, located in fs/btrfs/ctree.c. This can be triggered because rcu dereferenceroot-node can be zero, leading to a...
CVE-2019-9444
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
Design/Logic Flaw
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
UBUNTU-CVE-2019-9444
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-9444
CVE-2019-9444 affects the Android kernel’s sync debugfs driver, where a kernel pointer leak occurs due to using printf with %p. This leads to potential local information disclosure with system privileges required for exploitation. The vulnerability can be triggered locally, and user interaction i...
CVE-2019-9444
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
PT-2019-19653
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a kernel pointer leak in the Android kernel's sync debug fs driver. This leak occurs due to the use of printf with %p, which could lead to local information...
CVE-2019-9444: Exposure of Sensitive Information to an Unauthorized Actor
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-15938
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...
Buffer overflow
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...
CVE-2019-15938
Pengutronix barebox (through 2019.08.1) is affected by a remote buffer overflow in nfs_readlink_req (fs/nfs.c), where a length field is directly used in memcpy. This root cause enables an overflow over the network vector, with CVSS data indicating high/critical impact (network attack, no user int...
