30 matches found
CVE-2019-9623
Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "!--exec cmd=" in a .shtml file to ckuploadhandler.php...
CVE-2019-9623
CVE-2019-9623 affects Feng Office 3.7.0.5. Remote code execution is possible via the injection vector "
CVE-2017-9623
Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...
CVE-2017-9623
Telaxus EPESI is affected by multiple XSS vulnerabilities in version 1.8.2 and earlier, exploitable via crafted country data. The issue is the ability for remote attackers to inject arbitrary web script or HTML into the user’s browser. OpenVAS indicates a fix in EPESI
Fedora 25 : w3m (2017-2e6b693937)
Security fix for CVE-2016-9422, CVE-2016-9423, CVE-2016-9424, CVE-2016-9425, CVE-2016-9428, CVE-2016-9426, CVE-2016-9429, CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434, CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439, CVE-2016-9440,...
openSUSE Security Update : w3m (openSUSE-2016-1457)
This update for w3m fixes the following security issues bsc1011293 : - CVE-2016-9622: w3m: null deref bsc1012021 - CVE-2016-9623: w3m: null deref bsc1012022 - CVE-2016-9624: w3m: near-null deref bsc1012023 - CVE-2016-9625: w3m: stack overflow bsc1012024 - CVE-2016-9626: w3m: stack overflow...
CVE-2016-9623
CVE-2016-9623 affects the Tatsuya Kinoshita w3m fork prior to version 0.5.3-33; a crafted HTML page can remotely trigger a denial of service (segmentation fault/crash). Related connected sources confirm unpatched exposure and vendor patches have been released (e.g., Mageia update MGASA-2018-0024;...
CVE-2016-9623
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
SUSE SLED12 / SLES12 Security Update : w3m (SUSE-SU-2016:3053-1)
This update for w3m fixes the following issues : - update to debian git version bsc1011293 addressed security issues: CVE-2016-9622: w3m: null deref bsc1012021 CVE-2016-9623: w3m: null deref bsc1012022 CVE-2016-9624: w3m: near-null deref bsc1012023 CVE-2016-9625: w3m: stack overflow bsc1012024...
DEBIAN-CVE-2014-9623
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service disk consumption by deleting an image in the saving state...