497 matches found
Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path
Exploit Title: Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path Google Dork: N/A Date: 2019-11-11 Exploit Author: chuyreds Vendor Homepage: https://www.wondershare.com/ Software Link: https://www.wondershare.com/drfone/ Version: 2.4.3.231 Tested on: Window...
OPENSUSE-SU-2019:2466-1 Security update for gdal
This update for gdal to version 2.4.3 fixes the following issues: gdal was updated to 2.4.3: - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc boo1153918. - Multiple bug and stability fixes For more information regarding the release at:...
gdnsd Buffer Overflow Vulnerability
gdnsd is a DNS server written in C. It can be used as a server for the DNS server. A buffer error vulnerability exists in the 'setipv6' function of the zscanrfc1035.rl file in gdnsd versions prior to 2.4.3 and 3.x versions prior to 3.2.1. The vulnerability stems from a network system or product...
Stack overflow
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-1678 Cisco Meeting Server Denial of Service Vulnerability
A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service DoS to Cisco Meetings application users who are paired with a Session Initiation Protocol SIP endpoint. The vulnerability is due to improper validation of coSpaces...
Input validation
A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service DoS to Cisco Meetings application users who are paired with a Session Initiation Protocol SIP endpoint. The vulnerability is due to improper validation of coSpaces...
PT-2019-1392 · Cisco · Cisco Meeting Server
Name of the Vulnerable Software and Affected Versions: Cisco Meeting Server versions prior to 2.4.3 Description: A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service to Cisco Meetings application users who are paired with a...
PT-2019-5717 · Spring · Spring Web Services
Name of the Vulnerable Software and Affected Versions: Spring Web Services versions 2.4.3, 3.0.4, and older unsupported versions Description: The issue is related to incorrect restriction of XML links to external objects, which can lead to XML External Entity Injection XXE when receiving XML data...
rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems specification homepage attribute that can...
Cross-Site Scripting in nunjucks
Affected versions of nunjucks do not properly escape specially structured user input in template vars when in auto-escape mode, resulting in a cross-site scripting vulnerability. Proof of Concept By using an array for the keys in a template var, escaping is bypassed. javascript name=alert1 A full...
Oracle Sun Systems Products Suite Hardware Management Pack Component Unauthorized Operation Vulnerability
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Hardware Management Pack is one of the hardware management components. A security vulnerability exists in the Ipmitool subcomponent of the Hardware Management Pack component of the Oracle Sun Systems...
CVE-2017-18234
An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp,...
Null pointer dereference
An issue was discovered in Exempi before 2.4.3. The PostScriptSupport::ConvertToDate function in XMPFiles/source/FormatSupport/PostScriptSupport.cpp allows remote attackers to cause a denial of service invalid pointer dereference and application crash via a crafted .ps file...
CVE-2017-18237
Exempi vulnerability CVE-2017-18237: The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file. Affects Exempi before 2.4.3....
CVE-2018-1000075
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can...
Cross site scripting
Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog Title, FAQ Question, Pages Title, Widgets Name, and Menus Name...
Fedora 27 : ruby (2018-75e780a7c2)
Update to Ruby 2.4.3. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...
Wireshark IxVeriWave file parser denial of service vulnerability
Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of this software is to intercept network packets and display detailed data for analysis.IxVeriWave file parser is one of the IxVeriWave file parsers. A denial of service...
