CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5807

Summary: CVE-2020-5807 affects Rockwell Automation’s FactoryTalk Diagnostics (and related components) where an unauthenticated remote actor can send data to RsvcHost.exe (TCP port 5241) to inject log entries. The attacker can craft long fields that trigger an unhandled wcscpy_s() exception when a...

FactoryTalk Diagnostics All Security Vulnerabilities

Rockwell Automation FactoryTalk Diagnostics is a Rockwell Automation software program for diagnosing the status of equipment in industrial environments. The software is a subsystem of the FactoryTalk Industrial Architecture. A security vulnerability exists in all versions of FactoryTalk...

CVE-2020-5241 XSS/Script injection vulnerability in matestack

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

CVE-2020-5241

CVE-2020-5241 affects matestack-ui-core (RubyGem) up to version 0.7.3; the vulnerability is Cross‑Site Scripting (XSS) / Script injection due to strings not being escaped by default. The issue is fixed in 0.7.4. Public sources from NVD, Red Hat, Veracode, and CVE records consistently describe the...

CVE-2019-5241

Huawei PCManager

For a driver to mention the right vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword As Microsoft is constantly reinforcing core safety, enhance the native kernel components of the exploit difficulty, and now third party kernel drivers are gradually becoming the attacker's preferred target, is security analysts the focus of the study. Signed third-party driver...

Security Advisory - Two Vulnerabilities in Huawei PCManager Product

There is a privilege escalation vulnerability in Huawei PCManager product. Successful exploitation may cause the attacker to obtain a higher privilege. Vulnerability ID: HWPSIRT-2018-11141 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2019-5241. There is ...

org.apache.juddi.example:create-partition (=3.1.5), org.apache.juddi.example:hello-world (=3.1.5) +14 more potentially affected by CVE-2015-5241 via org.apache.juddi:juddi-client (>=3.1.2 <=3.1.5)

org.apache.juddi:juddi-client MAVEN version =3.1.2, =1.2.4, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.5 and more Source cves: CVE-2015-5241 Source advisory: OSV:GHSA-49H4-G8P5-JGQ6...

CVE-2018-5241

CVE-2018-5241 affects Symantec Advanced Secure Gateway (ASG) and ProxySG. The vulnerability arises when parsing SAML responses: XML nodes with comments are mishandled, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature and bypass authentica...

CVE-2017-5241

Biscom Secure File Transfer (SFT) versions 5.0.0.0–5.1.1024 are vulnerable to post-auth persistent XSS in the Name/Description fields of a Workspace and the Description field of a File Details pane for files in a Workspace. The issue is fixed in version 5.1.1025. Exploitation requires an authenti...

CVE-2015-5241

After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portlets based user interface also known as...

CVE-2015-5241

Apache jUDDI versions 3.1.2–3.1.5 are affected by an open redirect vulnerability in the logout JSP page, allowing an attacker to redirect users to an arbitrary page after login/logout. The issue stems from the logout flow in the portlets-based UI (Pluto, jUDDI Portal, UDDI Portal, uddi-console). ...

CVE-2016-5241

magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service arithmetic exception and application crash via a crafted svg file...

CVE-2016-5241

magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service arithmetic exception and application crash via a crafted svg file...

CVE-2016-5241

GraphicsMagick vulnerability CVE-2016-5241 affects the GraphicsMagick image processing suite (GraphicsMagick) with vulnerable code path in magick/render.c. The issue occurs when handling SVG input, where a crafted SVG can trigger an arithmetic exception and cause the application to crash, i.e., a...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-984)

This update for GraphicsMagick fixes the following issues : - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflo...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflow...

Important: GraphicsMagick

Issue Overview: It was discovered that GraphicsMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using GraphicsMagick or an unsuspecting user using the GraphicsMagick...

Fedora Update for GraphicsMagick FEDORA-2016-40ccaff4d1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...