118 matches found
CVE-2016-11052
An issue was discovered on Samsung mobile devices with L5.0/5.1 software. jefree in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 January 2016...
Memory corruption
An issue was discovered on Samsung mobile devices with L5.0/5.1 software. jefree in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 January 2016...
CVE-2016-11052
An issue was discovered on Samsung mobile devices with L5.0/5.1 software. jefree in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 January 2016...
CVE-2016-11052
This CVE affects Samsung mobile devices running Lollipop (5.0/5.1) and involves memory corruption in je_free() within libQjpeg.so (Qt 5.5’s Qjpeg). The root cause is parsing a malformed JPEG file, leading to potential memory corruption in affected components. Connected documents confirm the issue...
CVE-2019-5110
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
CVE-2019-5110
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
CVE-2019-5110
Forma LMS 2.2.1 is affected by multiple SQL injection vulnerabilities in authenticated areas. The TALOS advisories confirm exploitable injections in /appCore/index.php (users parameter) and /appLms/ajax.server.php (filter_cat, filter_status) that could allow an attacker to exfiltrate database dat...
CVE-2019-5110
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
CVE-2018-5110
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firefox. Note: This vulnerability only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox 58...
CVE-2018-5110
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firefox. Note: This vulnerability only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox 58...
CVE-2018-5110
This CVE (CVE-2018-5110) affects Firefox on macOS (OS X) prior to version 58. The issue occurs when cursor visibility is toggled by script from 'none' to an image and back, rendering the cursor temporarily invisible. The description does not specify the exact root cause beyond this behavior, nor ...
CVE-2018-5110
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firefox. Note: This vulnerability only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox 58...
Mozilla Firefox < 58 Multiple Vulnerabilities (macOS)
The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 58. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include'compat.inc'; if description...
Denial of Service Vulnerability in Multiple Moxa Nport Products (CNVD-2017-34490)
Moxa NPort 5110, 5130 and 5150 are Moxa's serial communication servers for connecting industrial serial devices to a network. A denial of service vulnerability exists in several Moxa Nport products, which could allow an attacker to launch a denial of service attack by injecting packets that could...
Denial of Service Vulnerability in Multiple Moxa Nport Products
Moxa NPort 5110, 5130 and 5150 are Moxa's serial communication servers for connecting industrial serial devices to a network. A denial of service vulnerability exists in several Moxa Nport products, which could allow an attacker to exhaust memory resources by sending a large number of TCP SYN...
CVE-2017-16719
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availabili...
CVE-2017-16715
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...
CVE-2017-14028
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount ...
CVE-2017-16715
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...
CVE-2017-14028
CVE-2017-14028 affects Moxa NPort devices: 5110 (versions 2.2, 2.4, 2.6, 2.7), 5130 (3.7 and prior), and 5150 (3.7 and prior). The vulnerability is an Uncontrolled Resource Consumption (Resource Exhaustion) that allows an attacker to exhaust memory resources by sending a flood of TCP SYN packets,...