152 matches found
JDA Connect CSRF / Command Execution / Exposed JMX Service
Introduction ============ Multiple critical vulnerabilities were identified in JDA Connect. The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive. Affected Software and Versions...
CVE-2018-6389 WordPress Parameter Resource Consumption Remote DoS
Yesterday Monday, February 5, 2018, a zero-day vulnerability in WordPress core was disclosed, which allows an attacker to perform a denial of service DoS attack against a vulnerable application. The vulnerability exists in the modules used to load JS and CSS files. These modules were designed to...
gstreamer/gst-discoverer: Negative-size-param in gst_buffer_fill
Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed report: https://oss-fuzz.com/testcase?key=5822394796081152 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type:...
Joomla SP Movie Database 1.4 SQL Injection
Exploit Title: SP Movie Database - SQL Injection Vulnerability Google Dork: inurl:option=comspmoviedb Date: 29.12.2017 Author: pwny Source Component : https://extensions.joomla.org/extension/sp-movie-database/ Version : 1.4 Tested on: Kali Linux proof : https://ibb.co/cjdiZw Search Form in Home...
Asus_GlobalWirteOverflow
Vulnerability: Global buffer overflow in networkmap ------------------------------------------ Exploitation: Can write data at any address in heap ------------------------------------------ Vendor of Product: Asus wireless router ------------------------------------------ Affected Products and...
gstreamer/gst-discoverer: Heap-buffer-overflow in gst_queue_locked_flush
Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed report: https://oss-fuzz.com/testcase?key=6589384829698048 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type:...
gstreamer/gst-discoverer: Heap-buffer-overflow in gst_parse_vorbis_setup_packet
Detailed report: https://oss-fuzz.com/testcase?key=5632833872723968 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61f000000cf9 Crash State:...
gstreamer/gst-discoverer: Heap-buffer-overflow in aiff_type_find
Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed report: https://oss-fuzz.com/testcase?key=4878605671727104 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type:...
FLIR Systems FLIR Thermal Camera FC-S/PT Authenticated OS Command Injection
Summary Get the best image detail in challenging imaging environments with the FLIR FC-Series S thermal network camera. The award-winning FC-Series S camera sets the industry standard for high-quality thermal security cameras, ideal for perimeter protection applications. The FC-Series S is capabl...
OV3 Online Administration 3.0 - Remote Code Execution
OV3 Online Administration 3.0 - Remote Code Execution !-- OV3 Online Administration 3.0 Authenticated Code Execution Vendor: novaCapta Software & Consulting GmbH Product web page: http://www.meacon.de Affected version: 3.0 Summary: With the decision to use the OV3 as a platform for your data...
CVE-2016-5500
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer...
CVE-2016-5500
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer...
CVE-2016-5495
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema...
CVE-2016-5495
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer...
CVE-2016-5495
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema...
CVE-2016-5500
CVE-2016-5500 concerns Oracle Fusion Middleware 11.1.1.7.0: an unspecified vulnerability in the Oracle Discoverer component (Viewer) that could allow remote attackers to affect confidentiality. The nominal affected area is Oracle Discoverer/Viewer within Fusion Middleware; the vulnerability is de...
CVE-2016-5495
CVE-2016-5495 affects Oracle Fusion Middleware 11.1.1.7.0’s Oracle Discoverer component. The vulnerability is described as unspecified with impact on confidentiality via vectors related to EUL Code & Schema; CVSS indicates 2.0: Partial confidentiality impact (base score 5.0) and 3.0: High confide...
