YOURLS Authorization Issues Vulnerability

YOURLS is a set of PHP-based open source short link platform. An authorization issue vulnerability exists in YOURLS 1.7.3 and earlier versions, which can be exploited by attackers to achieve login bypass...

CVE-2019-14537

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass...

Design/Logic Flaw

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass...

Gitea 1.7.2 - 1.7.3 XSS Vulnerability

Gitea is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if...

UBUNTU-CVE-2019-1010314

Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting XSS. The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page...

DEBIAN-CVE-2019-9917

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service crash via invalid encoding...

CVE-2019-9917

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service crash via invalid encoding...

CVE-2019-9917

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service crash via invalid encoding...

CVE-2019-9917

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service crash via invalid encoding...

ZNC Denial of Service Vulnerability (CNVD-2019-12157)

ZNC is a set of IRC proxies that allow users to log in to IRC servers from their workstations. A security vulnerability exists in versions prior to ZNC 1.7.3-rc1. A remote attacker could exploit this vulnerability to cause a denial of service crash...

znc -- Denial of Service

Mitre reports: ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service crash via invalid encoding...

Code Execution Vulnerability in Kolon Enterprise CMS v1.7.3

Kelong Enterprise CMS is a content management system launched by Zhangzhou Kelong Weite Electronic Co. A code execution vulnerability exists in KeLong Enterprise CMS v1.7.3, which can be exploited by attackers to gain control of a web server...

CVE-2018-1000216

Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON library is used this could...

AZL-41848 CVE-2018-1000216 affecting package libglvnd for versions less than 1.7.0-2

Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON library is used this could...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Ubiquiti Networks EdgeSwitch Code Execution Vulnerability

The Ubiquiti EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti EdgeSwitch 1.7.3 and earlier versions, which stems from the program's lack of protection for the admin CLI. The vulnerability can be exploited by an attacker to...

Ubiquiti Networks EdgeSwitch Code Execution Vulnerability (CNVD-2018-11987)

The Ubiquiti EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti EdgeSwitch 1.7.3 and earlier versions, which stems from the program's lack of protection for the admin CLI. An attacker could exploit the vulnerability to execute co...

Format string

Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an...

Pixelpost Arbitrary Code Execution Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A security vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit the vulnerability to execute code...