912 matches found
discord-html not escaping HTML code blocks when lacking a language identifier
Impact Any website using discord-markdown with user-generated markdown is vulnerable to having code injected into the page where the markdown is displayed. Patches This has been patched in version 2.3.1 Workarounds Escape the characters & before sending plain code blocks to discord-markdown...
Iteris Vantage Velocity Field Unit Operating System Command Injection Vulnerability
The Iteris Vantage Velocity Field Unit is a road monitoring field unit from Iteris USA. An operating system command injection vulnerability exists in the Iteris Vantage Velocity Field Unit versions 2.3.1, 2.4.2, and 3.0. An attacker exploits the vulnerability to execute commands via NTP Server...
CVE-2020-9023
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords User bluetooth, password bluetooth; User eclipse, password eclipse. Also, bluetooth is the root password...
SprintWork 2.3.1 - Local Privilege Escalation
SprintWork 2.3.1 - Local Privilege Escalation Exploit Title: SprintWork 2.3.1 - Local Privilege Escalation Exploit Author: boku Date: 2020-02-13 Vendor Homepage: https://veridium.net Software Link: https://veridium.net/filesu/spx/exe/SprintWork-Setup.exe Version: 2.3.1 Tested On: Windows 10 32-bi...
OpenJPEG Buffer Overflow Vulnerability (CNVD-2020-33736)
OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in OpenJPEG version 2.3.1 in the opjt1clbldecodeprocessor in the openjp2/t1.c file, which stems from the program's failure to properly check boundaries. A remote attacker could exploit this vulnerability wit...
openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()
A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...
Heap overflow
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
Heap overflow
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...
CVE-2020-6851
OpenJPEG vulnerability CVE-2020-6851 affects OpenJPEG 2.3.1 and older, with a heap-based buffer overflow in opj_t1_clbl_decode_processor (openjp2/t1.c) due to missing validation of opj_j2k_update_image_dimensions. Affected versions before 2.4.0 are at risk of arbitrary code execution or crash; ex...
openSUSE: Security Advisory for rmt-server (openSUSE-SU-2019:1824-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Arbitrary File Deletion Vulnerability in PESCMS Team 2.3.1
PESCMS Team is an open source team task management system written in PHP. An arbitrary file deletion vulnerability exists in PESCMS 2.3.1, which can be exploited by an attacker to delete arbitrary files after a series of operations...
Updated openjpeg2 packages fix security vulnerability
The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...
Magento CMS CVE-2019-8144 Remote Code Execution Vulnerability
Description Magento CMS is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Magento version 2.3 prior to...
CVE-2018-21010
OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c...
CVE-2018-21010
OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c...
WordPress Bold Page Builder Plugin < 2.3.2 Authentication Bypass Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113494";...
CVE-2019-15151
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h...
DEBIAN-CVE-2019-15151
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h...