PT-2019-13136 · Amazon · Amazon Freertos

Name of the Vulnerable Software and Affected Versions: Amazon FreeRTOS versions up to and including 1.4.8 Description: The issue is related to a lack of length checking in the prvProcessReceivedPublish function, which can lead to the untargetable leakage of arbitrary memory contents on a device t...

WordPress 360 Product Rotation plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by ImplosionSec in WordPress 360 Product Rotation plugin versions = 1.4.7. Solution Update the WordPress 360 Product Rotation plugin to the latest available version at least 1.4.8...

UBUNTU-CVE-2019-3462

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine...

CVE-2017-7576

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials such as the username of energetic and password of wireless meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in...

InvoicePlane Password Reset Vulnerability

InvoicePlane is a free and open source goods billing and customer management software. A password reset vulnerability exists in the index.php/sessions/passwordreset page of InvoicePlane version 1.4.8, which can be exploited by an attacker to reset the password of any user...

Fedora 21 : sblim-sfcb-1.4.8-5.fc21 (2015-14200)

Fix possible NULL pointer dereference CVE-2015-5185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SQL Injection, Reflected XSS, Path Traversal, Function Execution in ZenPhoto 1.4.8

Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version: 1.4.9 Risk: Medium Vendor Contacted: 2015-05-18 Vendor Fix: 2015-07-09 Public Disclosure: 2015-07-10 SQL Injection...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto 1.4.8 - Multiple Vulnerabilities Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version: 1.4.9 Risk: Medium Vendor Contacted: 2015-05-18 Vendor Fix: 2015-07-09...

WordPress April's Super Functions Pack Plugin Cross Site Scripting Vulnerability

WordPress April SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

CVE-2014-7434

The CVE-2014-7434 entry concerns RTSinfo (ch.rts.rtsinfo) app version 1.4.8 on Android, which does not verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. The connected...

MyBB 1.4.8 'search.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

OpenAFS GetStatistics64 RPC远程拒绝服务漏洞

Bugtraq ID:66776 CVE ID:CVE-2014-0159 OpenAFS是一款开放源代码的分布式文件系统。 OpenAFS GetStatistics64 RPC存在错误，允许攻击者利用漏洞发送特殊的请求触发缓冲区溢出和使应用程序崩溃。 0 OpenAFS 1.4.8 - 1.6.6 OpenAFS 1.6.7版本已修复该漏洞，建议用户下载使用： http://openafs.org/...

Debian DSA-2711-1 : haproxy - several vulnerabilities

Multiple security issues have been found in HAProxy, a load-balancing reverse proxy : - CVE-2012-2942 Buffer overflow in the header capture code. - CVE-2013-1912 Buffer overflow in the HTTP keepalive code. - CVE-2013-2175 Denial of service in parsing HTTP headers. %NASLMINLEVEL 70300 C Tenable...

CVE-2012-6097

File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...

Design/Logic Flaw

File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...

CVE-2012-6097

File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...

CVE-2012-6097

CVE-2012-6097 concerns a file descriptor leak in cronie 1.4.8 that, in certain environments, could let local users read restricted files (demonstrated via /etc/crontab). The issue is caused by cronie leaking FDs, enabling information disclosure. Affected product is cronie 1.4.8; impact is local d...

SourceBans 'xajax' Parameter Multiple Vulnerabilities

SourceBan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 15 : cups-1.4.8-2.fc15 (2011-11197)

This update avoids a GIF reader loop CVE-2011-2896. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2011-3170

The gifreadlzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than...