1231 matches found
Design/Logic Flaw
In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...
Design/Logic Flaw
In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c...
CVE-2020-6838
In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c...
CVE-2020-6838
In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c...
CVE-2020-6839
In mruby 2.1.0, there is a stack-based buffer overflow in mrbstrlentodbl in string.c...
CVE-2020-6839
CVE-2020-6839 affects mruby 2.1.0 with a stack-based buffer overflow in mrb_str_len_to_dbl (string.c). The connected documents corroborate this vulnerability. No remediation or patching details are provided in the supplied sources.
CVE-2020-6840
In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...
CVE-2020-6840
In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...
heap use after free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c
In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c...
heap use after free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c
In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...
stack overflow in mrb_str_len_to_dbl in src/string.c
In mruby 2.1.0, there is a stack-based buffer overflow in mrbstrlentodbl in string.c...
Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform License Issue Vulnerability
The Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform are both Medtronic power devices for the medical industry. An authorization issue vulnerability exists in Medtronic Valleylab FT10 VLFT10GEN versions 2.1.0 and earlier, 2.0.3 and earlier, and Valleylab LS10 Energy Platform VLLS10GEN...
Security Bulletin: Security vulnerabilities in IBM Java Runtime affect Rational Publishing Engine
Summary There are multiple vulnerabilities in IBM Java Runtime Environment, Versions 7 and 8 that are used by Rational Publishing Engine. These issues were disclosed as part of the IBM Java SDK updates in August 2019. Vulnerability Details CVEID: CVE-2019-2816 DESCRIPTION: Vulnerability in the Ja...
Rocket.Chat 2.1.0 Cross Site Scripting
Title: Rocket.Chat 2.1.0 - Cross-Site Scripting Author: 3H34N Date: 2019-10-22 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 2. Open a chat session 3. Send payload with your web server url 4. Token will be written in logs.txt when target seen your message...
CVE-2019-17220
Rocket.Chat before 2.1.0 allows XSS via a URL on a !title line...
Rocket.Chat Cross-Site Scripting Vulnerability (CNVD-2019-36863)
Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions of Rocket.Chat prior to 2.1.0, which stems from a lack of proper validation of client-side data by the web application and can be exploited by an attacker to execute client-side code...
Uncontrolled Resource Consumption in MetadataExtractor
MetadataExtractor 2.1.0 allows stack consumption...
CVE-2019-14262
MetadataExtractor 2.1.0 allows stack consumption...