CVE-2017-13738

There is an illegal address access in the lougetALine function in compileTranslationTable.c:346 in Liblouis 3.2.0...

DEBIAN-CVE-2017-13742

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile in compileTranslationTable.c, that will lead to a remote denial of service attack...

DEBIAN-CVE-2017-13741

There is a use-after-free in the function compileBrailleIndicator in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack...

UBUNTU-CVE-2017-13741

There is a use-after-free in the function compileBrailleIndicator in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack...

DEBIAN-CVE-2017-13744

There is an illegal address access in the function lougetALine in compileTranslationTable.c:343 in Liblouis 3.2.0...

CVE-2017-13739

CVE-2017-13739 involves a heap-based buffer overflow in Liblouis 3.2.0. The flaw occurs in resolveSubtable() within compileTranslationTable.c and can cause a write beyond the allocated bounds by more than two thousand bytes, leading to denial of service or remote code execution. The initial descr...

CVE-2017-13744

There is an illegal address access in the function lougetALine in compileTranslationTable.c:343 in Liblouis 3.2.0...

CVE-2017-13738

There is an illegal address access in the lougetALine function in compileTranslationTable.c:346 in Liblouis 3.2.0...

CVE-2017-13739

There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable in compileTranslationTable.c. It will lead to denial of service or remote code execution...

UBUNTU-CVE-2017-13738

There is an illegal address access in the lougetALine function in compileTranslationTable.c:346 in Liblouis 3.2.0...

phpBB 3.2.0 Server Side Request Forgery

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Server Side Request Forgery Vulnerability product: phpBB vulnerable version: 3.2.0 fixed version: 3.2.1 CVE number: impact: Medium homepage: https://www.phpbb.com/ found:...

Apache OpenMeetings Security Restriction Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security vulnerability exists in Apac...

Design/Logic Flaw

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-9599

The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

UBUNTU-CVE-2015-5211

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download RFD attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being...

Joomla! 'swf' File Upload And Multiple XSS Vulnerabilities

Joomla is prone to swf file upload and multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! cross-site scripting vulnerability (CNVD-2017-06581)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.2.0 through 3.6.5. The vulnerability arises due to insufficient escaping of file a...

Joomla! cross-site scripting vulnerability (CNVD-2017-06584)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.2.0 through 3.6.5. The vulnerability arises due to insufficient filtering. Allows...

Type confusion

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden...

Pivotal Spring Security Security Bypass Vulnerability

Pivotal Software Spring Security is a suite of security frameworks from Pivotal Software, Inc. that provide illustrative security protection for Spring-based applications. A security bypass vulnerability exists in Spring Security versions 3.2.0 - 3.2.9, 4.0.x - 4.1.3 and 4.2.0. An attacker can...