687 matches found
xcftools flattenIncrementally rows allocation code execution vulnerability
Summary An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur while calculating the row’s allocation size, that could be exploited to corrupt memory and eventually execute...
CVE-2019-17070
The liquid-speech-balloon aka LIQUID SPEECH BALLOON plugin before 1.0.7 for WordPress allows XSS with Internet Explorer...
PT-2019-11821 · Jenkins · Jenkins Aqua Microscanner Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Aqua MicroScanner Plugin version 1.0.7 and earlier Description: The issue involves the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially leading to their exposure...
UBUNTU-CVE-2019-16729
pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...
WordPress WooCommerce Instamojo Payment Gateway plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WooCommerce Instamojo Payment Gateway plugin is one of the Instamojo payment gateway plugins used in... WordPress WooCommerc...
CVE-2017-18527
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...
UBUNTU-CVE-2019-5477
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizerloadfile is being called with unsafe user input as the filename. This...
Yubico pam-u2f information disclosure vulnerability
Yubico pam-u2f is a portable authentication module for U2F. An information disclosure vulnerability exists in Yubico pam-u2f version 1.0.7. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An unauthorized attacker could...
Yubico pam-u2f information disclosure vulnerability
Yubico pam-u2f is a portable authentication module for U2F. An information disclosure vulnerability exists in Yubico pam-u2f version 1.0.7. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An unauthorized attacker could...
UBUNTU-CVE-2019-12210
In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the child process can then read from and write to it...
Path Traversal in http-live-simulator
Versions of http-live-simulator prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: curl --path-as-is http://localhost:8080//../../../../etc/passwd. Recommendation Upgrade to version 1.0.7...
CVE-2018-16479
Path traversal vulnerability in http-live-simulator 1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL...
CVE-2018-0695
Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0695
Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0695
Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-17104
CVE-2018-17104 affects Microweber 1.0.7, where a CSRF vulnerability in the admin flow allows an attacker to add an administrative account via the api/save_user endpoint. The issue enables CSRF against the admin user, potentially granting admin privileges without user consent; exploitation details...
Irssi Out-of-Bounds Read Vulnerability
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. An out-of-bounds read vulnerability exists in Irssi versions prior to 1.0.7 and 1.1.x prior to 1.1.1, which stems from the program's failure to properly handle nicknames and can be exploited by a remote attacker ...
Irssi null pointer dereference vulnerability (CNVD-2019-19208)
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A null pointer dereference vulnerability exists in Irssi versions prior to 1.0.7 and 1.1.x prior to 1.1.1, which can be exploited by a remote attacker to cause a denial of service null pointer backreference...