31 matches found
CVE-2019-9194
elFinder before 2.1.48 has a command injection vulnerability in the PHP connector...
CVE-2019-9194
The CVE-2019-9194 issue affects elFinder before 2.1.48 (PHP connector). The Nuclei/YAML entry and Exploit-DB records confirm a command injection in the PHP connector triggered during JPEG image operations, where the filename is passed to exiftran without proper sanitization, enabling remote comma...
CVE-2018-9194
CVE-2018-9194 relates to a plaintext recovery/MiTM vulnerability in RSA PKCS#1 v1.5 encryption exposed under Fortinet FortiOS VIP SSL when CPx is used, affecting FortiOS 5.4.6–5.4.9 and 6.0.0–6.0.1. The issue arises without knowledge of the server’s private key. Connected sources identify the vul...
CVE-2018-9194
A plaintext recovery of encrypted messages or a Man-in-the-middle MiTM attack on RSA PKCS 1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under VIP SSL feature when CPx being used...
CVE-2015-9194
CVE-2015-9194 affects Android on Qualcomm Snapdragon mobile platforms (SD 210/212/205, 400, 425, 427, 430, 435, 450, 617, 625, 650/652, 800, 845, Snapdragon_High_Med_2016). During TZ Startup module load, memory statically allocated by modules was not set to zero, allowing a module to run without ...
CVE-2017-9194
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2016-9194
CVE-2016-9194 affects Cisco Wireless LAN Controller (WLC) firmware, where a DoS can be triggered by unauthenticated adjacent attackers via malformed 802.11 WME frames due to incomplete input validation of the WME packet header in 802.11 WME action frame processing. Impact is a WLC reload (DoS). F...
CVE-2014-9194
The CVE-2014-9194 issue affects Arbiter Systems’ 1094B GPS Substation Clock. The vulnerability is described as Insufficient Verification of Data Authenticity (CWE-345) allowing remote attackers to spoof GPS satellite broadcasts via crafted radio transmissions, leading to clock disruption or servi...
SuSE9 Security Update : lha (YOU Patch Number 9194)
The source code of lha was reviewed to find possible security vulnerabilities. As a result several possible buffer overflows were fixed that can be exploited by providing a special archive to lha. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...