53 matches found
CVE-2019-7816
creationtimestamp| type| source ---|---|--- 2019-03-04 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=369 2019-05-24 18:48:31+00:00| seen| https://t.me/cvemitreorg/320...
VulnCheck KEV: CVE-2019-7816
ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution...
Adobe ColdFusion < 11.x < 11u18 / 2016.x < 2016u10 / 2018.x < 2018u3 Vulnerability (APSB19-14)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 11.x update 18, 2016.x update 10, or 2018.x update 3. It is, therefore, affected by a vulnerability as referenced in the APSB19-14 advisory. - File Upload Restriction Bypass potentially leading to Arbitrary code...
CVE-2017-7816
CVE-2017-7816 affects Mozilla Firefox versions before 56.0. WebExtensions could use popups or panels in the extension UI to load an "about:" privileged URL, bypassing security checks that disallow this behavior. Root cause: the extension UI could navigate to a privileged page, enabling potential ...
CVE-2014-7816
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wildflytraversal.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:32+00:00| seen|...
Mozilla Firefox < 56 Multiple Vulnerabilities (macOS)
The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 56. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable application crashes. C Tenable Network Security, Inc. include'compat.inc'; if...
Ubuntu: Security Advisory (USN-3435-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3435-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : Firefox regression (USN-3435-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3435-2 advisory. USN-3435-1 fixed vulnerabilities in Firefox. The update caused the Flash plugin to crash in some circumstances. This update fixes the problem. We...
CVE-2017-7816
WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavior. This vulnerability affects Firefox 56...
FreeBSD : mozilla -- multiple vulnerabilities (1098a15b-b0f6-42b7-b5c7-8a8646e8be07)
Mozilla Foundation reports : CVE-2017-7793: Use-after-free with Fetch API CVE-2017-7817: Firefox for Android address bar spoofing through fullscreen mode CVE-2017-7818: Use-after-free during ARIA array manipulation CVE-2017-7819: Use-after-free while resizing images in design mode CVE-2017-7824:...
Qemu: libcacard: host memory leakage while creating new APDU
Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...
CVE-2016-7816
The CVE-2016-7816 issue affects Cybozu kintone mobile for Android (1.0.6 and earlier). The root cause is that the app fails to verify X.509 certificates from SSL servers in WebView, enabling a man-in-the-middle attacker to spoof servers and capture sensitive information via a crafted certificate....
UBUNTU-CVE-2017-6414
Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...
QEMU '/src/card_7816.c' Denial of Service Vulnerability
QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU '/src/card7816.c'. An attacker can exploit this vulnerability to cause a QEMU instance to...
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities
Exploit for windows platform in category remote exploits I have recently been playing with Apache ActiveMQ, and came across a simple but interesting directory traversal flaw in the fileserver upload/download functionality. I have only been able to reproduce this on Windows, i.e. where "" is a pat...
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...
CVE-2015-7816
CVE-2015-7816 affects Piwik (renamed Matomo) prior to 2.15.0, where the DisplayTopKeywords function in plugins/Referrers/Controller.php allows PHP object injection, Server-Side Request Forgery (SSRF), and arbitrary PHP code execution via a crafted HTTP header. The issue is caused by insecure hand...
Piwik 2.14.3 PHP Object Injection
----------------------------------------------------------------------- Piwik = 2.14.3 DisplayTopKeywords PHP Object Injection Vulnerability ----------------------------------------------------------------------- - Software Link: https://piwik.org/ - Affected Versions: Version 2.14.3 and prior...