CVE-2026-16985

creationtimestamp| type| source ---|---|--- 2026-08-10 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117070392510526892 2026-08-10 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n...

CVE-2019-16985

In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...

CVE-2019-16985

creationtimestamp| type| source ---|---|--- 2024-01-17 11:06:26+00:00| seen| https://t.me/ctinow/169211...

CVE-2020-16985

Azure Sphere Information Disclosure Vulnerability...

CVE-2020-16985

Azure Sphere Information Disclosure Vulnerability (CVE-2020-16985) affects Microsoft Azure Sphere. Public sources indicate an information disclosure flaw present in Azure Sphere versions prior to 20.09, enabling an attacker to gain unauthorized access to the device file system. Root cause details...

CVE-2017-16985

This CVE entry is rejected and not used as explicitly stated.

CVE-2019-16985

In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...

CVE-2019-16985

In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...

CVE-2019-16985

In FusionPBX up to v4.5.7, the file app\xmlcdr\xmlcdrdelete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system...

CVE-2019-16985

FusionPBX contains a path traversal/file-deletion vulnerability in versions up to 4.5.7. The file app\xml_cdr\xml_cdr_delete.php uses an unsanitized URL parameter rec, which is base64 decoded and can cause deletion of arbitrary system files. Reported impact is arbitrary file deletion; remediation...

CVE-2018-16985

In Lizard formerly LZ5 2.0, use of an invalid memory address was discovered in LZ5compresscontinue in lz5compress.c, related to LZ5compressfastSmall and MEMread32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-16985

In Lizard (formerly LZ5) 2.0, CVE-2018-16985 arises from an invalid memory address in LZ5_compress_continue (lz5_compress.c), related to LZ5_compress_fastSmall and MEM_read32. This leads to a segmentation fault and application crash, causing denial of service. Details on affected products/version...