41 matches found
Security update for podofo
This update for podofo fixes the following issues: CVE-2015-8981: Fixed heap overflow in the function ReadXRefSubsection bsc1023190 CVE-2017-6840: Fixed invalid memory read in ColorChanger::GetColorFromStack colorchanger.cpp bsc1027787 CVE-2017-6841: Fixed NULL pointer dereference in...
CVE-2024-8981
creationtimestamp| type| source ---|---|--- 2024-10-01 06:02:42+00:00| seen| https://t.me/cvedetector/6698...
CVE-2024-8981 Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting
The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg in /app/admin-notices/features/class-view.php without appropriate escaping on the URL in all versions up to, and including, 2.4.0. This makes it possible for unauthenticated...
WordPress Broken Link Checker Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Broken Link Checker Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8981 Patch priority Medium CVSS severity Medium 7.1 Developer WPMU DEV PSID 5ef9d4c1245b Credits vgo0 Required privile...
Security Bulletin: Vulnerability in Cache-Control header usage affects IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x (CVE-2016-8981).
Summary IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Vulnerability Details CVEID: CVE-2016-898...
CVE-2020-8981
A cross-site scripting XSS vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repodelete.php Delete Repository page allows execution of arbitrary code via a repo name if CSP settings permit it. This is related to CVE-2018-16362...
CVE-2020-8981
The CVE-2020-8981 entry is linked to the MantisBT Source Integration plugin and is corroborated by multiple sources describing a cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages (via repo_manage_page.php or list.php). The related exploitation path can le...
CVE-2019-8981
Removed by vendor...
CVE-2019-8981
CVE-2019-8981 affects the axTLS library (tls1.c) prior to version 2.1.5. The root cause is a mismanagement of the need_bytes value, leading to a buffer overflow when processing crafted TLS packets. Documented impact is a buffer overflow; exploitation details are not provided in the connected docu...
Fedora Update for podofo FEDORA-2018-2f3c0cdf93
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-8981
HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...
HPESBHF03813 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution
Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC 7.3 E0506 - Reported on Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8981 |...
CVE-2014-8981
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2015-8981
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to moffsets.size...
CVE-2015-8981
The CVE-2015-8981 issue affects PoDoFo's PdfParser::ReadXRefSubsection in base/PdfParser.cpp, where a heap-based buffer overflow can be triggered via vectors related to m_offsets.size, leading to unspecified impact. Public advisories (OSV-2024:3550-1 and similar Fedora/SUSE notes) list patches fo...
CVE-2015-8981
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to moffsets.size...
CVE-2016-8981
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system...
CVE-2016-8981
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system...
CVE-2016-8981
CVE-2016-8981 affects IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x. The issue stems from cache-control/header usage that allows web pages containing sensitive information to be cached locally by a browser, potentially readable by other users on the same system. Impact described as a...