CVE-2019-7438

cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...

CVE-2019-7438

CVE-2019-7438 affects JioFi 4G M2S 1.0.2 devices; vulnerability in cgi-bin/qcmap_web_cgi allows XSS/HTML injection via the mask POST parameter, with exploit examples and public writeups (exploit-db, PacketStorm, etc.). Impact described as client-side script injection; CVSS metrics in sources show...

Debian: Security Advisory (DLA-1297-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4129-1 : freexl - security update

Multiple heap buffer over reads were discovered in freexl, a library to read Microsoft Excel spreadsheets, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4129. The te...

[SECURITY] [DSA 4129-1] freexl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4129-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 02, 2018 https://www.debian.org/security/faq -...

CVE-2017-7438

NetIQ Privileged Account Manager is affected up to version 3.1 Patch Update 3. The vulnerability allows cross-site scripting by altering the JavaScript DOM via the cookie parameter, enabling injected scripts in authenticated sessions. Affected component/behavior is DOM manipulation leading to XSS...

openSUSE: Security Advisory for freexl (openSUSE-SU-2018:0570-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : freexl (openSUSE-2018-217)

This update for freexl fixes the following issues : freexl was updated to version 1.0.5 : - No changelog provided by upstream - Various heapoverflows in 1.0.4 have been fixed : - CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 - CVE-2018-7438:...

Debian DLA-1297-1 : freexl security update

Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-7436 There is a heap-based buffer over-read in a pointer dereference of the parseSST function. CVE-2018-7437 There is a...

Security update for freexl (important)

This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...

Security update for freexl (important)

This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...

OPENSUSE-SU-2018:0569-1 Security update for freexl

This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...

OPENSUSE-SU-2018:0570-1 Security update for freexl

This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...

UBUNTU-CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

CVE-2014-7438

CVE-2014-7438 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

DEBIAN-CVE-2016-7438

The C software implementation of ECC in wolfSSL formerly CyaSSL before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences...

CVE-2016-7438

The CVE-2016-7438 entry concerns wolfSSL (formerly CyaSSL) and its C software implementation of ECC. Affected is wolfSSL versions before 3.9.10, where the ECC code enables local attackers to more easily discover RSA keys by exploiting cache-bank hit differences. The impact is local, with partial ...

CVE-2015-7438

CVE-2015-7438 affects IBM Sterling B2B Integrator 5.2. It describes a local information-disclosure flaw where a local attacker can obtain sensitive cleartext web-services information by leveraging database access. Documented in NVD/NIST and corroborated by multiple sources (CNVD, CVE lists). The ...