ACD Systems Canvas Draw 4 FillSpan Out of Bounds Write Code Execution Vulnerability

Summary An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

Synology Calendar Improper Authorization Vulnerability

Synology Calendar is a file protection program from Synology that runs on Synology NAS devices. An authorization issue vulnerability exists in SYNO.Cal.Event in Synology Calendar. A remote attacker can exploit this vulnerability to create arbitrary events with the 'calid' or 'originalcalid'...

CVE-2018-8927

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the 1 calid or 2 originalcalid parameter...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...

WordPress Payment Form for PayPal Pro Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Payment Form for PayPal Pro plugin is used in one of the payment plugin. WordPress Payment Form for PayPal Pro...

CVE-2015-7666: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the 1 cpupdateMessageItem and 2 cpdeleteMessageItem functions in cppppadminintmessagelist.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal...

cal-span.org XSS vulnerability

Open Bug Bounty ID: OBB-431414 Description| Value ---|--- Affected Website:| cal-span.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

cal-span.org XSS vulnerability

Vulnerable URL: http://www.cal-span.org/StateWebcast/streamindex.php?agency=CCC=1"...

ecatalog.calstatela.edu XSS vulnerability

Vulnerable URL: http://ecatalog.calstatela.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

Hollister So Cal Style - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hollister So Cal Style published at the 'play' market has multiple vulnerabilities...

CVE-2014-8325: Undefined Security Weakness

The Calendar Base cal extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service resource consumption via vectors related to the PHP PCRE library...

WP-Cal 0.3 - editevent.php SQL Injection

The wp-cal WordPress plugin was affected by an editevent.php SQL Injection security vulnerability...

CVE-2014-4605: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cal/test.php in the ZdStatistics zdstats plugin 2.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

ACME Perl-Cal 2.99 Cal_make.PL Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15779/info Perl-Cal is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

WordPress ZdStatistics Plugin <= 2.0.1 - XSS

Because of this vulnerability in cal/test.php, the attackers can inject arbitrary web script or HTML via the "lang" parameter. Solution Update the plugin...

Privilege escalation

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

CVE-2014-2140: Undefined Security Weakness

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the code of the Cisco ONS 15454 Controller Cards could allow an unauthenticated, remote attacker to cause the control card to reset. The vulnerability is due to improper instructions to reload the controller card. A CAL pipe fails to open when the file descriptors are exhausted...

14,000 Californians at Risk Following Medi-Cal, DHCS Breach

Medi-Cal, California’s Medicaid welfare program, came clean to customers this week admitting it mistakenly posted almost 14,000 of its users’ Social Security numbers online last month. Providers of In-Home Supportive Services IHSS care in 25 counties are affected by the breach, according to a...

Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...