1738 matches found
Out-of-bounds
An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffe...
CVE-2018-3835
PTEX (Walt Disney Per-Face Texture Mapping) v2.2 contains an out-of-bounds write when reading a file header field (faceinfosize) without proper validation, leading to potential buffer overflow and remote code execution. The TALOS advisory details a vulnerability in readFaceInfo/readZipBlock where...
X6CMS backend has arbitrary file deletion vulnerability
X6CMS, fully known as Xiaoliu Website Content Management System, is a full-featured marketing website management platform with PHP+MYSQL architecture, built-in SEO optimization mechanism in the whole station, simple interface and convenient operation. X6CMS V2.220130305 version of the background...
CMS Made Simple Code Execution Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in some core modul...
CMS Made Simple File Inclusion Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...
IBM Sterling File Gateway Cross-Site Scripting Vulnerability (CNVD-2017-37579)
IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A cross-site scripting vulnerability exists in IBM Sterling...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to Cross‑Site Scripting (CVE-2017-1632). The vulnerability allows injection of arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Sterling File Gateway 2.2. Remedia...
CVE-2017-1550
Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...
CVE-2017-1549
IBM Sterling File Gateway 2.2 is affected by a Cross-Site Scripting (XSS) vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue is documented as CVE-2017-1549. A remediation is available: ap...
CVE-2017-16719
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availabili...
Information disclosure
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...
Sql injection
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availabili...
CVE-2017-10885
CVE-2017-10885 affects HYPER SBI, where the installer has an insecure DLL search path (CWE-427) in Ver. 2.2 and earlier. This can allow arbitrary code execution with the invoking user’s privileges during installation. Affected component: the HYPER SBI installer; root cause: insecure DLL search or...
GHSA-CQR7-78PJ-3G7J File Descriptor Leak Can Cause DoS Vulnerability in hapi
Versions 2.0.x and 2.1.x of hapi are vulnerable to a denial of service attack via a file descriptor leak. When triggered repeatedly, this leak will cause the server to run out of file descriptors and the node process to die. The effort required to take down a server depends on the process file...
Moderate severity XSS vulnerability that affects rails
Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper. 9/4/2009 url mentions patches for 2.0, 2.1, 2.2, and 2.3 series...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
CVE-2015-6521
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
