26 matches found
MINI-9239-94JQ-89WM
Bulletin has no description...
MINI-VCM6-9239-FC2R
Bulletin has no description...
CVE-2019-9239
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121263487...
Linux Distros Unpatched Vulnerability : CVE-2017-9239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue to 0x0, and the value of pValue is...
CVE-2024-9239 Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 7.2.3. This makes it possible for unauthenticated attackers to inject...
WordPress Booster for WooCommerce Plugin <= 7.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9239 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c5b658709ea3 Credits vgo0...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Exiv2 vulnerabilities (USN-3852-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3852-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of...
SUSE: Security Advisory (SUSE-SU-2020:0921-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-9239
Huawei smartphones BLA-A09 versions 8.0.0.123C212,versions earlier than 8.0.0.123C567,versions earlier than 8.0.0.123C797;BLA-TL00B versions earlier than 8.1.0.326C01;Berkeley-L09 versions earlier than 8.0.0.163C10,versions earlier than 8.0.0.163C432,Versions earlier than 8.0.0.163C636,Versions...
CVE-2020-9239
CVE-2020-9239 describes an information-leak vulnerability in Huawei smartphones (various models and OS versions listed in the sources). The root cause is a design error described as a lack of input control in a module, enabling attackers to obtain information and potentially leak data. Public doc...
CVE-2015-9239
creationtimestamp| type| source ---|---|--- 2020-09-01 15:17:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2v2-7rcg-2ch7...
@akryum/hotel (>=0.8.8 <=0.8.12), @bdefore/nivo-patterned-radial-arc (=0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (=0.0.1)
ansi2html NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...
openSUSE: Security Advisory for exiv2 (openSUSE-SU-2020:0482-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2020:0921-1)
This update for exiv2 fixes the following issues : exiv2 was updated to latest 0.26 branch, fixing bugs and security issues : CVE-2017-1000126: Fixed an out of bounds read in webp parser bsc1068873. CVE-2017-9239: Fixed a segmentation fault in TiffImageEntry::doWriteImage function bsc1040973...
SUSE SLES12 Security Update : exiv2 (SUSE-SU-2020:0860-1)
This update for exiv2 fixes the following issues : CVE-2018-17581: Fixed an excessive stack consumption in CiffDirectory:readDirectory which might have led to denial of service bsc1110282. CVE-2019-13110: Fixed an integer overflow and an out of bounds read in CiffDirectory:readDirectory which mig...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2019-2576)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2019-2375)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-9239
The CVE-2019-9239 entry concerns Android 10 where NFC processing is subject to an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure without requiring advanced privileges; exploitation requires user interaction. The concrete affected product/edition no...
USN-3852-1 exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2017-9239 only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-11591, CVE-2017-11683, CVE-2017-14859, CVE-2017-14862, CVE-2017-14864, CVE-2017-17669...
CVE-2015-9239
CVE-2015-9239 affects the ansi2html package and is a regular expression denial of service (ReDoS) vulnerability triggered by certain types of user input. The connected advisories document a PoC and confirm the issue, with CVSS v3.1 base score 7.5 (HIGH) and High availability impact per the NVD en...