CVE-2007-3915

Mondo 2.24 has insecure handling of temporary files...

Information disclosure

Mondo 2.24 has insecure handling of temporary files...

CVE-2007-3915

Mondo 2.24 has insecure handling of temporary files...

CVE-2007-3915

Mondo 2.24 has insecure handling of temporary files...

Fedora 28 : webkit2gtk3 (2019-432b3dff25)

Rebase to latest stable branch 2.24. For details see 2.23 and 2.24 release notes : - https://www.webkitgtk.org/2018/11/22/webkitgtk2.23.1-released.html - https://www.webkitgtk.org/2019/01/08/webkitgtk2.23.2-released.html - https://www.webkitgtk.org/2019/01/14/webkitgtk2.23.3-released.html -...

Fedora 29 : webkit2gtk3 (2019-b3ad0a302b)

Rebase to latest stable branch 2.24. For details see 2.23 and 2.24 release notes : - https://www.webkitgtk.org/2018/11/22/webkitgtk2.23.1-released.html - https://www.webkitgtk.org/2019/01/08/webkitgtk2.23.2-released.html - https://www.webkitgtk.org/2019/01/14/webkitgtk2.23.3-released.html -...

QQQ SYSTEMS OS Command Injection Vulnerability

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A security vulnerability exists in QQQ SYSTEMS version 2.24. An attacker can exploit this vulnerability to execute arbitrary commands...

QQQ SYSTEMS cross-site scripting vulnerability (CNVD-2018-07697)

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A cross-site scripting vulnerability exists in QQQ SYSTEMS version 2.24. A remote attacker can exploit this vulnerability to inject arbitrary web scripts via the quizop.cgi file...

CVE-2018-0539

QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

JVN#96655441: QQQ SYSTEMS vulnerable to cross-site scripting

QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quizop.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on the user...

Routers2 Cross-Site Scripting Vulnerability

Routers2 is a front-end routing tool. A cross-site scripting vulnerability exists in Routers2 version 2.24. A remote attacker can exploit this vulnerability to inject malicious script into a client browser...

CVE-2018-6193

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

CVE-2018-6193

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

Cross site scripting

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

Fedora 25 : xen (2016-1d8429b89f)

fix build problem with glibc 2.24 x86: Disallow L3 recursive pagetable for 32-bit PV guests XSA-185, CVE-2016-7092 x86: Mishandling of instruction pointer truncation during emulation XSA-186, CVE-2016-7093 x86 HVM: Overflow of shctxt-segreg XSA-187, CVE-2016-7094 pandoc documentation has dependen...

Multiple Command Injection Vulnerabilities in Veil-Evasion RPC

Veil-Evasion is a suite of tools designed specifically for generating kill-free MSFPAYLOAD. A command injection vulnerability exists in Veil-Evasion versions 2.5.2 through 2.24, which can be exploited by an attacker to execute arbitrary commands in an affected application...

CVE-2014-8504

Stack-based buffer overflow in the srecscan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted file...

Stack overflow

Stack-based buffer overflow in the ihexscan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted ihex file...