36 matches found
CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs...
CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 is vulnerable to SSRF via the aggregate plugin, with the ability to read local files via file: URIs. No patch/version remediation details are provided in the supplied documents.
CVE-2014-9187
creationtimestamp| type| source ---|---|--- 2019-03-25 23:27:15+00:00| seen| https://t.me/cibsecurity/3341...
CVE-2014-9187
Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and...
CVE-2014-9187
CVE-2014-9187 involves multiple heap-based buffer overflow vulnerabilities in Honeywell Experion PKS modules (confd.exe, dual_onsrv.exe, hscodbcn.exe, ripsd.exe) that affect all versions prior to R400.6, R410.6, and R430.2. Root cause: heap-based memory corruption could lead to remote code execut...
Debian DLA-1716-1 : ikiwiki security update
The ikiwiki maintainers discovered that the aggregate plugin did not use LWPx::ParanoidAgent. On sites where the aggregate plugin is enabled, authorized wiki editors could tell ikiwiki to fetch potentially undesired URIs even if LWPx::ParanoidAgent was installed : local files via file: URIs other...
[SECURITY] [DLA 1716-1] ikiwiki security update
Package : ikiwiki Version : 3.20141016.4+deb8u1 CVE ID : CVE-2019-9187 The ikiwiki maintainers discovered that the aggregate plugin did not use LWPx::ParanoidAgent. On sites where the aggregate plugin is enabled, authorized wiki editors could tell ikiwiki to fetch potentially undesired URIs even ...
Debian: Security Advisory (DLA-1716-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4399-1] ikiwiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4399-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2019 https://www.debian.org/security/faq -...
CVE-2015-9187
CVE-2015-9187 affects Android devices with Qualcomm Snapdragon SoCs (e.g., Snapdragon Automobile, Mobile, Wear lines) prior to the 2018-04-05 patch level. The issue is a lack of buffer length validation in the pvr_cmd_handler, which can lead to unauthorized access to secure memory. The NVD/Androi...
CVE-2017-9187
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7...
CVE-2017-9187
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7...
CVE-2017-9187
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7...
Fedora Update for moodle FEDORA-2016-4f7d4df7b3
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-9187
CVE-2016-9187: Unrestricted file upload in Moodle 3.1.2 image module due to double-extension handling allows remote authenticated users to execute arbitrary code by uploading an executable and accessing it via an unspecified vector. Connected documents corroborate the vulnerability and indicate a...