7484 matches found
arcms unauthorized access vulnerability
arcms is a content management system based on layui and arphp. A security vulnerability exists in arcms 2018-03-19 and earlier versions, which stems from the program failing to authenticate index/main, user/useradd, or img/images. An attacker can exploit the vulnerability to gain unauthorized...
CVE-2018-19212
In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser that will lead to a DoS attack...
LuPng Buffer Over-Read Vulnerability
LuPng is a PNG format decoder/encoder. A heap buffer over-read vulnerability exists in the 'internalPrintf' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...
CVE-2018-18581
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c...
CVE-2018-9078
creationtimestamp| type| source ---|---|--- 2018-10-03 15:26:43+00:00| seen| MISP/5bb4df32-f218-45d9-aa7e-1dc00a021402...
CVE-2018-9081
creationtimestamp| type| source ---|---|--- 2018-10-03 15:26:43+00:00| seen| MISP/5bb4df32-f218-45d9-aa7e-1dc00a021402...
CVE-2018-17300
Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...
PowerDNS Authoritative Server < 3.4.11 / 4.0 < 4.0.2 DoS Vulnerabilities
An issue has been found in PowerDNS Authoritative Server allowing a remote, unauthenticated attacker to cause a denial of service DoS by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole...
Invalid Memory Address Dereference Vulnerability in libming 'decompileSingleArgBuiltInFunctionCall' Function
libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'decompileSingleArgBuiltInFunctionCall' function in version 0.4.8 of libming prior to 2018-03-12, which...
fledrCMS Cross-Site Request Forgery Vulnerability
fledrCMS is a lightweight, responsive PHP-based content management system CMS. A cross-site request forgery vulnerability exists in fledrCMS 2014-02-03 and earlier versions. A remote attacker can exploit this vulnerability to change the administrator password with the help of the...
daveismyname simple-cms authentication flaw vulnerability
daveismyname simple-cms is a content management system CMS. A security vulnerability exists in daveismyname simple-cms on 2014-03-11 and earlier versions, which stems from adding pages without authentication. An attacker can exploit the vulnerability to add pages...
CVE-2018-15553
The CVE-2018-15553 entry concerns Telus Actiontec T2200H/T2200H-31.128L.03 devices where the fileshare.cmd component allows OS command injection via shell metacharacters in the smbdUserid or smbdPasswd fields. Affected product/firmware: Telus Actiontec T2200H with firmware 31.128L.03. Root cause ...
Fedora 27 : yubico-piv-tool (2018-aa46eb30be)
New upstream release fixing YSA-2018-03 1613863 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2018-8096
creationtimestamp| type| source ---|---|--- 2018-08-03 01:22:23+00:00| seen| https://t.me/VulnerabilityNews/456...
Design/Logic Flaw
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcrmessagemessage in rmessage.c...
CVE-2018-14743
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretypedecode in context.c...
CVE-2018-14739
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternsetdefault in pattern.c...
PHP 7.0.x < 7.0.31 Use After Free Arbitrary Code Execution in EXIF
According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.31. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...