10238 matches found
The vulnerability of the Log Viewer component of the SAP NetWeaver software integration platform allows a hacker to bypass the catalog and execute arbitrary code in the context of the server.
The vulnerability of the Log Viewer component in the SAP NetWeaver software integration platform exists due to an incorrect restriction on the path name to the restricted access directory. The web application recognizes “.” and “/” as part of a valid file path. Exploiting this vulnerability allow...
Code injection
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme...
CVE-2017-14764
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module...
CVE-2017-14764
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module...
CVE-2017-14763
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme...
CVE-2017-14763
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme...
Design/Logic Flaw
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module...
CVE-2017-14763
GeniXCMS 1.1.4 is affected by CVE-2017-14763: remote authenticated users can trigger arbitrary PHP code execution through a .php file in a Theme ZIP during the Install Themes process. The issue arises from how theme archives are handled, enabling code execution from uploaded theme files. This is ...
CVE-2017-14764
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module...
GeniXCMS Arbitrary PHP Code Execution Vulnerability
GeniXCMS is a free, open-source content management system that is built using the PHP language and uses MySQL for its database. An arbitrary PHP code execution vulnerability exists in the "Upload Module" page of GeniXCMS, which can be exploited by a remote authenticated user to execute arbitrary...
pitchbook.com XSS vulnerability
Vulnerable URL: https://pitchbook.com/news/archive?date-range=x" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24255 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...
CVE-2017-14503
libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...
Chef Software Directory Traversal Vulnerability
Chef Software is a set of server application configuration tools written in Ruty and Erlang by Chef Software. mixlib-archive is one of the gem extraction archive tools. A directory traversal vulnerability exists in Chef Software in versions 0.3.0 and earlier of mixlib-archive. A remote attacker c...
SUSE-SU-2017:2546-1 Security update for libzip
This update for libzip fixes one issues. This security issue was fixed: - CVE-2017-14107: The zipreadeocd64 function mishandled EOCD records, which allowed remote attackers to cause a denial of service memory allocation failure in zipcdirgrow in zipdirent.c via a crafted ZIP archive bsc1056996...
Design/Logic Flaw
libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...
DEBIAN-CVE-2017-14503
libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive, related to lhacrc16...
ALPINE-CVE-2017-14501
An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...
DEBIAN-CVE-2017-14501
An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...
Out-of-bounds
readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...