6358 matches found
Code injection
The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element within a plugin element can specify an arbitrary program in an executable element and can also specify arbitrary command-line arguments in an arguments element...
The vulnerability of the mwifiex_process_country_ie() function (driver/net/wireless/marvell/mwifiex/sta_ioctl.c) in the Marvell WiFi driver for the Linux operating system exists due to a buffer overflow issue. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the mwifiexprocesscountryie function driver/net/wireless/marvell/mwifiex/staioctl.c in the Marvell WiFi driver for the Linux operating system is related to memory buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data,...
Vulnerability Spotlight: Apple Safari SVG marker element baseVal remote code execution vulnerability
Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Apple’s Safari web browser is open to a remote code execution vulnerability via its SVG marker element feature inside the Safari WebKit. Safari uses the WebCore DOM rendering system in WebKit. Rendering engine allo...
Apple Safari SVG Marker Element baseVal Remote Code Execution Vulnerability
Summary A freed memory access vulnerability exists in the SVG Marker Element feature of Apple Safari’s WebKit version 13.0.2. A specially crafted HTML web page can cause a use after free, resulting in memory corruption and possibly arbitrary code execution. To trigger this vulnerability, a...
CVE-2019-15638
COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element...
CVE-2019-15638
COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element...
CVE-2019-15638
The CVE-2019-15638 entry concerns COPA-DATA zenon Editor (zenone32) up to version 8.10 that is affected by an Uncontrolled Search Path Element. The connected records confirm the product and issue but do not provide additional details on affected subcomponents, root cause beyond the general elemen...
Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-44525)
Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in the thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h file for...
Default credentials
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is...
Denial Of Service (DoS) Through Infinite Loop
css-element-queries is vulnerable to denial of service DoS attacks. If an element is added to DOM and removed from DOM very quickly even before the first reset happens, the requestAnimationFrame of reset itself will get stuck in an infinite loop leading to denial of service conditions and memory...
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor license manager allows a violator to trigger a service failure.
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon is related to errors in adding elements to the lmadmin service. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
Design/Logic Flaw
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2011-1803
An issue exists in thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element...
CVE-2019-18848
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...
CVE-2019-18848
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...
Design/Logic Flaw
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...