12 matches found
CVE-2019-16973
In FusionPBX up to 4.5.7, the file app\contacts\contactedit.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2022-41851
A vulnerability has been identified in JTTK All versions V11.1.1.0, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An...
Null pointer dereference
A vulnerability has been identified in JTTK All versions V11.1.1.0, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An...
CVE-2022-41851
Siemens JT Open Toolkit (JTTK) and Simcenter Femap are affected by CVE-2022-41851 due to an uninitialized pointer reference when parsing specially crafted JT files. Affected versions: JTTK < 11.1.1.0; Simcenter Femap < 2022.1.3 (V2022.1) and
CVE-2020-16974
Technical details about CVE-2020-16974 (affected product/version, root cause, impact, or patch specifics) are not provided in the connected documents. Monitor for updates.
CVE-2020-16973
Technical details for CVE-2020-16973 are not publicly available in the provided connected documents. The initial description notes an elevation of privilege via Windows Backup Service file operations with local access. Monitor for updates.
Microsoft Windows Multiple Vulnerabilities (KB4580327)
This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-16973
CVE-2017-16973 is rejected/not used; this candidate number was not assigned to an active issue.
CVE-2019-16973
In FusionPBX up to 4.5.7, the file app\contacts\contactedit.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...
CVE-2019-16973
FusionPBX ≤ 4.5.7 is affected by a reflected XSS in app\contacts\contact_edit.php where an unsanitized URL query_string is echoed into HTML. This is the root cause: unsanitized input from the URL being reflected, enabling cross-site scripting. Exploitation details are not provided in the document...
Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2018-16973)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Kernel component futex. An attacker can exploit this vulnerability to achieve elevation of privilege...