larvitlog (>=0.1.0 <=0.3.4), larvituser-api (>=0.2.0 <=0.4.0) potentially affected by CVE-2019-5479 via larvitbase-api (>=0.2.2 <=0.5.1)

larvitbase-api NPM version =0.2.2, =0.1.0, =0.2.0, =0.4.0 Source cves: CVE-2019-5479 Source advisory: OSV:GHSA-XF27-JQWV-GF3R...

CVE-2019-5479

An unintended require vulnerability in v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code JavaScript file...

CVE-2019-5479

CVE-2019-5479 affects larvitbase-api (node package). Versions prior to 0.5.4 allow an Unintended Require where an exposed API endpoint passes a GET parameter to a require() call, enabling an attacker to load and execute arbitrary JavaScript files present in the server directory. Public descriptio...

CVE-2019-5479

An unintended require vulnerability in v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code JavaScript file...

Microhard Systems 3G4G Cellular Ethernet and Serial Gateway - Remote Root

Microhard Systems 3G4G Cellular Ethernet and Serial Gateway - Remote Root Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160...

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Remote Root Vulnerability

Exploit for hardware platform in category web applications Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160 IPn4Gb 1.1.6...

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Remote Root

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160 IPn4Gb 1.1.6 build 1184-14 IPn4Gb 1.1.0 Rev 2 build 1090-2 IPn4Gb 1.1.0 R...

Microhard Systems 3G/4G Cellular Ethernet And Serial Gateway Remote Root

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160 IPn4Gb 1.1.6 build 1184-14 IPn4Gb 1.1.0 Rev 2 build 1090-2 IPn4Gb 1.1.0 R...

CVE-2018-5479

FoxSash ImgHosting 1.5 (search engine) is vulnerable to cross-site scripting via the search parameter in the default URI. The CVE notes an XSS impact that can lead to session theft of users and admins when a crafted URL is visited. Several connected sources (CNVD/CNVD-2018-04325, NVD entry, and e...

ImgHosting 1.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ImgHosting Image Storage System 1.5 - Cross-Site-Scripting Date: 12-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: foxsash.com Version: 1.5 CVE-ID: CVE-2018-5479 ImgHostin...

CVE-2008-5479

CVE-2008-5479 is rejected; this candidate is not used and not linked to a vulnerability.

CVE-2016-5479

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA...

Debian DLA-644-1 : libav security update

Multiple vulnerabilities have been found in libav : CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds...

[SECURITY] [DLA 644-1] libav security update

Package : libav Version : 6:0.8.18-0+deb7u1 CVE ID : CVE-2015-1872 CVE-2015-5479 CVE-2016-7393 Multiple vulnerabilities have been found in libav: CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Sta...

Moodle 2.1.x < 2.1.9 / 2.2.x < 2.2.6 / 2.3.x < 2.3.3 Multiple Vulnerabilities

Binary data 9528.prm...

openSUSE Security Update : libav (openSUSE-2016-779)

This update for libav fixes the two following security issues : - CVE-2016-3062: A MP4 memory corruption was fixed that could lead to crashes or code execution. boo984487 - CVE-2015-5479: A crash due to a divide by zero was fixed in ffh263decodemba that could lead to decoder crashes. boo949760...

CVE-2015-5479

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

CVE-2015-5479

Libav’s ff_h263_decode_mba in libavcodec/ituh263dec.c is vulnerable before 11.5, allowing remote attackers to cause a denial of service (divide-by-zero and crash) via crafted dimensions. The issue stems from insufficient validation during H.263 MBA decoding. Impact is a crash; confidentiality/int...

CVE-2013-5479

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

CVE-2013-5479

CVE-2013-5479 affects Cisco IOS NAT with DNS-over-TCP; vulnerability exists in DNS-over-TCP implementation on IOS 12.2 and 15.0–15.3 when NAT is used, allowing remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream (Bug CSCtn53730). Connected documents con...