CVE-2018-1149

creationtimestamp| type| source ---|---|--- 2018-09-19 17:42:27+00:00| seen| MISP/5ba2897d-c56c-497c-a45d-3bd00a021402...

CVE-2018-1149

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

CVE-2018-1149

CVE-2018-1149 affects NUUO NVRMini2 (and NVRSolo per ICS advisory) with firmware up to 3.8.0. A stack-based buffer overflow in the HTTP CGI interface (cgi_system) allows remote, unauthenticated code execution via crafted HTTP requests (cookie header causing overflow). Also documented is CVE-2018-...

CVE-2018-1149

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

kingslodgeinn.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-677813 Description| Value ---|--- Affected Website:| kingslodgeinn.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NUUO NVR < 3.9.1 Multiple Vulnerabilities

NUUO Network Video Recorder NVR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nuuo:nuuo";...

NUUO NVRMini2 Multiple Vulnerabilities

The version of NUUO NVRMini2 installed on the remote host is affected by multiple vulnerabilities: - NUUO NVRMini2 web server utilizes CGI binaries in order to handle a variety of commands that require authenticated interaction. Implemented session handling mechanism doesn't validate user's input...

CVE-2017-1149

CVE-2017-1149 affects IBM UrbanCode Deploy (UCD) versions 6.0, 6.1, and 6.2. The vulnerability is an XML External Entity (XXE) injection in XML data processing, enabling a remote attacker to cause a denial of service and potentially disclose sensitive information or exhaust memory resources. The ...

walgreens.com XSS vulnerability

Vulnerable URL: https://www.walgreens.com/steps/articles/articles.jsp?plckTag=sunburn Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1149 VIP website status:| Yes Check walgreens.com SSL connection:| Grade: A+...

SUSE SLES11 Security Update : freetype2 (SUSE-SU-2016:1149-1)

This update of the freetype2 library fixes two security issues : - An infinite loop in parseencoding in t1load.c CVE-2014-9745, bsc945849 - Use of uninitialized memory in psparserloadfield, t42parsefontmatrix and t1parsefontmatrix CVE-2014-9747, bsc947966 Note that Tenable Network Security has...

CVE-2016-1149

Cybozu Office is affected: versions 9.0.0–10.3.0 contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact includes potential partial integrity compromise; exploitation details are not provided in the doc...

srh.noaa.gov XSS vulnerability

Vulnerable URL: http://www.srh.noaa.gov/abq/jump.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1149 Google Pagerank| 7 VIP website status:...

APPLE-SA-2015-04-08-5 Xcode 6.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2015-04-08-5 Xcode 6.3 Xcode 6.3 is now available and addresses the following: Clang Available for: OS X Mavericks v10.9.4 or later Impact: An attacker may be able to bypass stack guards Description: A register allocation issue existed in...

CVE-2015-1149

Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion...

CVE-2015-1149

CVE-2015-1149 affects the Swift simulator in Apple Xcode prior to 6.3. The issue is an integer overflow during type-conversion in the Swift simulator, which can cause conversions to return unexpected values and enable a denial-of-service or related unspecified impact. Affected product: Xcode and ...

Apple Xcode < 6.3 (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 6.3. It is, therefore, affected by the multiple vulnerabilities : - A stack allocation issue in Clang allows an attacker to bypass stack guards. BID 73987 - An integer overflow issue in the Swift simulator leads to...

CVE-2013-1149

CVE-2013-1149 affects Cisco ASA and FWSM: remote attackers can cause a denial of service (device reload) by sending a crafted IKEv1 message. Affected software ranges include ASA 7.x up to 7.2(5.10), 8.0 up to 8.0(5.28), 8.1/8.2 up to 8.2(5.35), 8.3 up to 8.3(2.34), 8.4 up to 8.4(4.11), 8.6 up to ...

LibreOffice Graphic Object Loading Buffer Overflow Vulnerability - Windows

LibreOffice is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreOffice Graphic Object Loading Buffer Overflow Vulnerability (Mac OS X)

This host is installed with LibreOffice and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gblibreofficegraphicobjectbofvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ LibreOffice Graphic Object Loading Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty...

Gentoo Security Advisory GLSA 201209-05 (libreoffice)

The remote host is missing updates announced in advisory GLSA 201209-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...