62 matches found
Artifex MuJS 1.0.2 Integer Overflow
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Exploit Title: Integer signedness error leading to Out-of-bounds read that causes crash Date: 2018-01-24 Exploit Author: Andrea Sindoni - @invictus1306 Vendor: Artifex...
CVE-2018-6191
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
CVE-2018-6191
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
CVE-2018-6191
MuJS up to version 1.0.2 contains an integer overflow in js_strtod (jsdtoa.c) due to incorrect exponent validation. This affects Artifex MuJS when parsing numbers and can lead to a crash/DoS (as shown by Exploit-DB tooling). Connected documents indicate the issue was fixed in commit 25821e6d74fab...
CVE-2014-6191
Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568...
CVE-2012-6191
CVE-2012-6191 entry is rejected/not used as stated in the initial description.
CVE-2015-6191
CVE-2015-6191 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-6191
The CVE-2017-6191 entry concerns APNGDis 2.8 and earlier, where a buffer overflow can be triggered by a crafted filename. Affected component: APNGDis (versions 2.8 and earlier). Root cause: buffer overflow in filename handling. Impact: remote attacker could execute arbitrary code; exploitation is...
APNGDis 2.8 - filename Stack Buffer Overflow Exploit
Exploit for multiple platform in category dos / poc Exploit Title: APNGDis filename Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested on: Linux Debi...
APNGDis 2.8 - chunk size descriptor Heap Buffer Overflow Exploit
Exploit for multiple platform in category dos / poc Exploit Title: APNGDis chunk size descriptor Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested o...
APNGDis 2.8 - filename Stack Buffer Overflow (PoC)
APNGDis 2.8 - filename Stack Buffer Overflow PoC Exploit Title: APNGDis filename Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested on: Linux Debian ...
APNGDis 2.8 - 'filename' Stack Buffer Overflow (PoC)
Exploit Title: APNGDis filename Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested on: Linux Debian / Windows 7 CVE : CVE-2017-6191 Additional...
CVE-2016-6191
The CVE-2016-6191 entry describes multiple XSS vulnerabilities in SOGo’s Web Calendar, specifically in the View Raw Source page. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via fields: Description, Location, URL, or Title, leading to client-side script execution. Af...
[security bulletin] HPSBGN02951 rev.1 - HP Operations Orchestration, Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04041093 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04041093 Version: 1 HPSBGN02951 rev....
HP Operations Orchestration Central 9.06 Cross Site Scripting
Name: XSS in HP Operations Orchestration Central version 9.06 Systems Affected: HP Operations Orchestration version 9.06 Severity: High Vendor: Hewlett-Packard References: CVE-2013-6191, CVE-2013-6192, SSRT101342 Author: Bart Leppens Date: 20130919 I. BACKGROUND HP Operations Orchestration HP OO ...
CVE-2013-6191
HP Operations Orchestration (OO) before version 9 is vulnerable to Cross-Site Scripting (XSS) via unspecified vectors, enabling potential manipulation of web content. The issue is documented as CVE-2013-6191 and is addressed by HP with patch v9.07.0004. The cited bulletin notes XSS/CSRF risks for...
SuSE 11.2 Security Update : RPM (SAT Patch Number 6191)
Multiple security vulnerabilities were reported in RPM which could have been exploited via specially crafted RPM files to cause a denial of service application crash or potentially allow attackers to execute arbitrary code. Additionally, a non-security issue has been fixed that could have caused ...
CVE-2008-6191
Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries...