111 matches found
CVE-2019-10778
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable commonName controlled by user input is used as part of the exec function without any sanitization...
Command Injection
Overview devcert-sanscache is a package that can be used to generate trusted local SSL/TLS certificates for local SSL development. Affected versions of this package are vulnerable to Command Injection. The variable commonName controlled by user input is used as part of the exec function without a...
Prototype Pollution in assign-deep
Versions of assign-deep before 0.4.7 are vulnerable to prototype pollution via merging functions. Recommendation Update to version 0.4.7 or later...
GHSA-XCVV-84J5-JW9H Prototype Pollution in assign-deep
Versions of assign-deep before 0.4.7 are vulnerable to prototype pollution via merging functions. Recommendation Update to version 0.4.7 or later...
CVE-2018-3720
assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data MAID vulnerability, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects...
PT-2018-16144 · Npm · Assign-Deep
Name of the Vulnerable Software and Affected Versions: assign-deep versions prior to 0.4.7 Description: The issue allows a malicious user to modify the prototype of Object via proto , causing the addition or modification of an existing property that will exist on all objects. This is achieved...
Design/Logic Flaw
proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter...
Yahei-PHP Prober Cross-Site Scripting Vulnerability
Yahei-PHP Proberv is a tool for detecting server information such as server hard disk resources, memory usage, network card traffic, system load and IP. A cross-site scripting vulnerability exists in the proberv.php file in Yahei-PHP Proberv version 0.4.7. A remote attacker can exploit this...
WordPress Crony Cronjob Manager Plugin Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site.Crony Cronjob Manager plugin is one of the plug-ins used to create and manage Cronjobs. A cross-site request...
Updated ming packages fix security vulnerability
The update fixes CVE-2017-7578: Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: This issue exists because of an incomplete fix fo...
libming parser.c file heap buffer overflow vulnerability
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A heap buffer overflow vulnerability exists in the parser.c file in libming version 0.4.7. A remote attacker can exploit this vulnerability to cause a denial of service listswf application cra...
CVE-2017-7578
CVE-2017-7578 is a set of multiple heap-based buffer overflows in the parser.c module of libming 0.4.7. The vulnerability allows remote attackers to trigger a denial of service (listswf application crash) or potentially cause unspecified other impact via a crafted SWF file; it is noted to exist d...
CVE-2016-9264
Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...
Buffer overflow
Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...
CVE-2016-9265
The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
CVE-2016-9827
The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...
CVE-2016-9831
Heap-based buffer overflow in the parseSWFRGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...
CVE-2016-9828
The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...