1091 matches found
Use of uninitialized pointer in mrb_hash_keys
The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkeys uninitialized pointer and application crash or possibly have unspecified other impact...
Design/Logic Flaw
Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content...
CVE-2014-10065
Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content...
Out-of-bounds Read
Overview Versions of byte before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length Recommendation Update to version 1.4.1 or later. References - HackerOne Report - PR 3 - GitHub Advisory...
Regular Expression Denial of Service
Overview Version of is-my-json-valid before 1.4.1 or 2.17.2 are vulnerable to regular expression denial of service ReDoS via the email validation function. Recommendation Update to version 1.4.1, 2.17.2 or later. References - GitHub PR 159 - GitHub Commit b3051b2 - HackerOne Report - GitHub Advis...
Snap7 Server Denial of Service Vulnerability
Snap7 is an open source, multi-platform Ethernet communication suite for local connectivity with PLCs.Snap7 Server is one of the server components. A security vulnerability exists in Snap7 Server version 1.4.1. An attacker can exploit this vulnerability to cause a denial of service crash...
Input validation
The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...
ConverTo Video Downloader&Converter File Download Vulnerability
ConverTo Video Downloader&Converter is an online video download system. A security vulnerability exists in ConverTo Video Downloader&Converter version 1.4.1. The vulnerability can be exploited to download arbitrary files by sending a 'token' parameter to the download.php file...
Design/Logic Flaw
ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...
CVE-2017-15956
ConverTo Video Downloader & Converter v1.4.1 is vulnerable to an Arbitrary File Download via the token parameter to download.php. CNVD-2017-36121 and CVE-2017-15956 describe that the vulnerability allows downloading arbitrary files by supplying a crafted token, exposing sensitive data. The root c...
CVE-2017-15956
ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...
WordPress WP-Contact-Widgets 1.4.1 Cross Site Scripting Vulnerability
WordPress WP-Contact-Widgets plugin version 1.4.1 suffers from a stored cross site scripting vulnerability. Exploit Title: Stored XSS on wp-contact-widgets 1.4.1 wordpress plugin Exploit Author: Boumediene KADDOUR Publisher: R&D Unit Algerie Telecom Version: 1.4.1 Application website:...
Debian DLA-1003-1 : unrar-nonfree security update
It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian 7 'Wheezy', these problems have been fixed in version 1:4.1.4-1+deb7u2. We recommend that you...
Siemens SIMATIC CP 44x-1 Redundant Network Access Modules
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC CP 44x-1 Redundant Network Access RNA modules Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of the SIMATIC CP 44x-1 RNA, which connect SIMATIC S7-400 CPUs t...
Siemens SIMATIC CP 44x-1 RNA Module Unauthorized Operation Vulnerability
The Siemens SIMATIC CP 44x-1 RNA is a communication processor with integrated firewall, VPN, security protocols, data encryption, and other security features that provides network connectivity and secure communication for s7-1500 controllers. An unauthorized operation vulnerability exists in the...
Mautic Cross-Site Request Forgery Vulnerability
Mautic is a marketing automation software. Multiple cross-site request forgery CSRF vulnerabilities exist in Mautic version 1.4.1. The vulnerabilities allow remote attackers to hijack a user's authentication information and perform unauthorized actions, including: deleting email campaigns or,...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2017-8874
CVE-2017-8874 affects Mautic 1.4.1 and describes multiple CSRF vulnerabilities that allow remote attackers to hijack a user’s session to perform actions such as deleting email campaigns or deleting contacts. The NVD notes CVSS-3.0 base score 8.8 (high) with network attack vector, low access compl...
CVE-2017-8874
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...