6796 matches found
The vulnerability in the implementation of the ddb_open handler in the kernel of the Astra Linux operating system allows a hacker to cause a service failure.
The vulnerability in the implementation of the ddbopen handler in the kernel of the Astra Linux operating system the loaded module is drivers/media/pci/ddbridge/ddbridge.ko is related to a memory leak. In the ddbopen function, a call is made to the ddbsiminorinode array, which contains 32 element...
WebP Express <= 0.14.4 - Authenticated Stored XSS
Edit - WPScanTeam: The reported issue has been fixed in 0.14.5. Other sanitisation checks have been implemented in newest versions such as 0.14.6 and 0.14.8 while the plugin was closed, so the fixed in is set to 0.14.8 PoC Video POC :...
WordPress WebP Express plugin <= 0.14.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by M0ns7er in WordPress WebP Express plugin versions = 0.14.4. Solution Update the WordPress WebP Express plugin to the latest available version at least 0.14.8...
WebP Express <= 0.14.4 - Authenticated Stored XSS
Edit - WPScanTeam: The reported issue has been fixed in 0.14.5. Other sanitisation checks have been implemented in newest versions such as 0.14.6 and 0.14.8 while the plugin was closed, so the fixed in is set to 0.14.8 Video POC :...
Remote code execution
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...
CVE-2019-12869
PHOENIX CONTACT Automation Worx Software Suite components PC Worx, PC Worx Express, and Config+ (version 1.86 and earlier) are affected by CVE-2019-12869. The issue is an Out-Of-Bounds Read that can lead to Information Disclosure and remote code execution when an attacker manipulates a legitimate...
CVE-2019-12869
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds Read, Information Disclosure, and remote code execution. The attacker needs to get access to an...
CVE-2019-12870
PHOENIX CONTACT Automation Worx Software Suite (PC Worx, PC Worx Express, Config+; v1.86 and earlier) is affected by CVE-2019-12870. The issue is an uninitialized pointer leading to remote code execution. An attacker must obtain an original PC Worx/Config+ project file, manipulate it, and replace...
CVE-2019-12871
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free and remote code execution. The attacker needs to get access to an original PC Worx or Config+ proje...
CVE-2019-12871
CVE-2019-12871 affects Phoenix Contact Automation Worx Software Suite up to v1.86 (PC Worx, PC Worx Express, Config+). The issue is a Use-After-Free in the handling of project files (notably BCP parsing) that could allow remote code execution after an attacker manipulates a legitimate PC Worx/Con...
CVE-2019-12870: Access of Uninitialized Pointer
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...
CVE-2019-12871: Use After Free
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free and remote code execution. The attacker needs to get access to an original PC Worx or Config+ proje...
CVE-2019-12869: Out-of-bounds Read
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds Read, Information Disclosure, and remote code execution. The attacker needs to get access to an...
Phoenix Contact Automation Worx Software Suite Uninitialized Pointer Access Vulnerability
Automation Worx Software Suite is an automation software package from Phoenix Contact. An uninitialized pointer access vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploi...
api-browser (>=0.0.1, <=0.0.3), koa2-swagger-ui (2.2.1) +2 more potentially affected by unknown CVE via swagger-ui (>=3.0.5, <=3.13.3)
swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: unknown CVE Source advisory: OSV:GHSA-X9P2-FXQ6-2M5F...
PT-2019-2529
Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT PC Worx versions 1.86 and earlier PHOENIX CONTACT PC Worx Express versions 1.86 and earlier PHOENIX CONTACT Config+ versions 1.86 and earlier Description An issue was discovered that could lead to an Uninitialized Pointer and...
June 18, 2019âKB4503289 (OS Build 15063.1897)
None None...
WebP Express <= 0.14.10 - Multiple Issues
- Arbitrary File Viewing - CRSF - XSS including https://wpvulndb.com/vulnerabilities/9389 - Unauthorised Access...
WordPress WebP Express plugin <= 0.14.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found in WordPress WebP Express plugin versions = 0.14.0. Solution Update the WordPress WebP Express plugin to the latest available version at least 0.14.1...
Rate Limiting Bypass in express-brute
All versions of express-brute are vulnerable to Rate Limiting Bypass. Concurrent requests may lead to race conditions that cause the package to incorrectly count requests. This may allow an attacker to bypass the rate limiting provided by the package and execute requests without limiting...