58 matches found
@cowlick/analyzer (>=0.9.0, <=0.9.1), @cowlick/kag-compiler (>=0.9.0, <=0.9.1) +4 more potentially affected by CVE-2020-8244 via bl (2.0.1)
bl NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @cowlick/analyzer =0.9.0, =0.9.0, =4.1.6, =1.2.0, =1.0.0, =1.0.0, =1.1.37 Source cves: CVE-2020-8244 Source advisory: GHSA-PP7H-53GX-MX7R...
CVE-2020-8244
A buffer over-read vulnerability exists in bl 4.0.3, 3.0.1, 2.2.1, and 1.2.3 which could allow an attacker to supply user input even typed that if it ends up in consume argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via...
DEBIAN-CVE-2020-8244
A buffer over-read vulnerability exists in bl 4.0.3, 3.0.1, 2.2.1, and 1.2.3 which could allow an attacker to supply user input even typed that if it ends up in consume argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via...
00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +16491 more potentially affected by CVE-2020-8244 via bl (>=0.1.1, <=1.2.1)
bl NPM version =0.1.1, =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 06-tekbooks 0.1.0 - 066m7q8o0z 2.1...
@here/harp-leaflet (>=0.2.4, <=0.2.5) potentially affected by CVE-2020-8244 via bl (4.0.2)
bl NPM version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @here/harp-leaflet =0.2.4, =0.2.5 Source cves: CVE-2020-8244 Source advisory: MEND:CVE-2020-8244...
CVE-2019-8244
CVE-2019-8244 affects Adobe Media Encoder versions 13.1 and earlier, which contain an out-of-bounds read vulnerability that could lead to information disclosure. The public sources in the connected documents consistently attribute the issue to Adobe Media Encoder prior to 14.0 and reference the A...
CVE-2019-8244
Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
CVE-2018-8244
CVE-2018-8244 is an elevation-of-privilege vulnerability in Microsoft Outlook (Office) where attachment headers are not properly validated. Exploitation could occur when a user opens or processes a crafted attachment, enabling local privilege escalation. Public details specify affected products a...
Microsoft Outlook 2010 Service Pack 2 Elevation of Privilege Vulnerability (KB4022205)
This host is missing an important security update according to Microsoft KB4022205 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4022169)
This host is missing an important security update according to Microsoft KB4022169 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Updates for Outlook (June 2018)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly. An attacker who...
CVE-2017-8244
CVE-2017-8244 affects Android CAF builds leveraging the Linux kernel. The vulnerability arises in core_info_read and inst_info_read where the buffer structures dbg_buf, dbg_buf->curr, and dbg_buf->filled_size can be concurrently modified by multiple threads without mutexes/locks. This race ...
CVE-2016-8244
CVE-2016-8244 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
CVE-2014-8244
Linksys SMART WiFi firmware on various router models, including EA2700, EA3500, E4200v2, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900 , is vulnerable to an information disclosure flaw (CWE-200 ). A remote, unauthenticated attacker can send specially crafted HTTP POST requests to the...
Linksys SMART WiFi firmware contains multiple vulnerabilities
Overview Linksys EA series routers running the Linksys SMART WiFi firmware contain multiple vulnerabilities. Description CWE-320: Key Management Errors - CVE-2014-8243An remote, unauthenticated attacker can read the router's .htpassword file by requesting https:///.htpasswd. The .htpasswd file...
Unfixed XSS vulnerability at legrandclub.rds.ca
Security researcher h3xStream, has submitted on 03/08/2010 a cross-site-scripting XSS vulnerability affecting legrandclub.rds.ca, which at the time of submission ranked 8244 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...
Solaris Update for PostgreSQL 8.3 source code 138824-06
Check for the Version of PostgreSQL 8.3 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.3 source code 138824-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...