30 matches found
CVE-2019-5144
Kakadu Software SDK 7.10.2 contains a heap-based vulnerability in derive_taps_and_gains (kdu_v7ar.dll). The issue arises from a flawed interaction between allocate_floats and enlarge_work_buffers, which can cause a heap overflow when handling step_info_n, leading to potential remote code executio...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
CVE-2019-14225
OX App Suite is affected by a Server-Side Request Forgery (SSRF) in the backend for versions 7.10.1 and 7.10.2. Root cause details are not fully described beyond the SSRF label, but fixed versions are 7.10.0-rev33, 7.10.1-rev17, and 7.10.2-rev9. Exploit status is not provided beyond the advisory ...
CVE-2019-14226
Open-Xchange OX App Suite prior to fixes 7.10.2 has an insecure permissions issue in the backend affecting versions 7.10.1 and 7.10.2. The vulnerability allows partial confidentiality and integrity impact with no availability impact, and was addressed by vendor with fixed versions 7.10.0-rev33, 7...
CVE-2019-14227
Open-Xchange OX App Suite is affected by CVE-2019-14227 (XSS) in versions 7.10.1 and 7.10.2. The vulnerability stems from insufficient validation of client-side data in the WEB application, enabling cross-site scripting. Reported in multiple sources, with remediation provided by vendor fixes: 7.1...
