39 matches found
CVE-2019-7136
creationtimestamp| type| source ---|---|--- 2019-05-23 16:48:40+00:00| seen| https://t.me/cvemitreorg/211...
CVE-2019-7136
Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information disclosure...
CVE-2019-7136
CVE-2019-7136 is an Adobe Bridge CC 9.0.2 use-after-free vulnerability. The flaw could lead to information disclosure if exploited. Public documents indicate remediation via updating to 9.0.3 (APSB19-25). No exploitation details are provided in the supplied sources.
CVE-2017-7136
CVE-2017-7136 is documented as a memory corruption vulnerability in the ld64 linker used by Apple Xcode prior to version 9, exploitable via parsing a crafted Mach‑O file to achieve arbitrary code execution or a denial of service. The connected sources (Apple security content for Xcode 9 and relat...
CVE-2017-7136
An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Mach-O file...
CVE-2016-7136
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting XSS attacks via a crafted GET request...
CVE-2016-7136
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting XSS attacks via a crafted GET request...
CVE-2016-7136
Plone CMS 5.x up to 5.0.6 and 4.x up to 4.3.11 is affected by CVE-2016-7136 due to z3c.form, enabling remote XSS via a crafted GET request. Root cause: improper handling in z3c.form that allows injected scripts. Impact: cross-site scripting could compromise user sessions or site integrity. Remedi...
K7Firewall < 14.0.1.16 Packet Driver Privilege Escalation Vulnerability
K7 Computing product is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Plone CMS 4.3.11 / 5.0.6 XSS / Traversal / Open Redirection
Product Description Plone is a free and open source content management system built on top of the Zope application server. Plone is positioned as an "Enterprise CMS" and is most commonly used for intranets and as part of the web presence of large organizations Systems Affected Product : Plone...
CVE-2016-7136
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting XSS attacks via a crafted GET request...
CVE-2014-7136
Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver aka K7Firewall Packet Driver before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call...
CVE-2014-7136
CVE-2014-7136 describes a heap-based buffer overflow in the K7FWFilt.sys kernel-mode driver (K7Firewall Packet Driver) used by K7 Computing products, prior to version 14.0.1.16. The vulnerability allows a local attacker to gain kernel privileges by crafting a parameter in a DeviceIoControl call. ...
Fedora Update for mozilla-https-everywhere FEDORA-2012-7136
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Code injection
toolbaru.dll in ICQ Toolbar ICQToolbar 2.3 allows remote attackers to cause a denial of service toolbar crash via a long argument to the IsChecked method, a different vector than CVE-2008-7136...
CVE-2008-7136
CVE-2008-7136 concerns ICQ Toolbar (ICQToolbar) version 2.3, where the ICQ Toolbar’s ActiveX control toolbaru.dll is vulnerable. The weakness allows remote attackers to cause a denial of service (toolbar crash) by sending a long argument to one of three methods: RequestURL, GetPropertyById, or Se...
CVE-2008-7136
creationtimestamp| type| source ---|---|--- 2008-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5217...
CVE-2006-7136
CVE-2006-7136 : Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativer_pfad parameter to (poll.php, poll_kommentar.php, poll_sm.php). Affected component is the phpPC poll suite...