10 matches found
CVE-2019-16736
A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...
CVE-2019-16736
creationtimestamp| type| source ---|---|--- 2024-03-11 17:46:20+00:00| seen| https://t.me/ctinow/204900...
CVE-2020-16736
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2020-16736
...
CVE-2019-16736
CVE-2019-16736 describes a stack-based buffer overflow in processCommandUploadSnapshot within libcommon.so used by Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30). The flaw can allow remote attackers, without authentication or user interaction, to trigger denial of service or execute...
Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Vulnerability
Exploit for linux platform in category web applications Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Exploit Author: Fahimeh Rezaei Vendor Homepage: https://plugins.roundcube.net/packages/eagle00789/rcfilters Software Link:...
CVE-2018-16736
CVE-2018-16736 affects the Roundcube rcfilters plugin (v2.1.6). The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the _whatfilter and _messages parameters in the Filters settings. Documented impact is cross-site scripting, with NVD listing CVSS v2 base score 3.5 (LOW) and CVSS v3...
Advantech WebAccess SCADA gmicons.asp picfile Arbitrary File Upload (CVE-2017-16736)
An arbitrary file upload vulnerability exists in Advantech WebAccess SCADA software. The vulnerability is due to insufficient input validation of the picfile parameter within gmicons.asp...
CVE-2017-16736
Summary: CVE-2017-16736 affects Advantech WebAccess prior to 8.3. The root cause is insufficient input validation of the picfile parameter in gmicons.asp, enabling a remote attacker to perform an arbitrary file upload. Impact (as described): Remote arbitrary file upload could enable further compr...
CVE-2017-16736
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files...