1201 matches found
CVE-2018-6191
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
Integer overflow
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
CVE-2018-6191
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
CVE-2018-6191
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
CVE-2018-6191: Integer Overflow or Wraparound
The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...
PT-2018-17396
Name of the Vulnerable Software and Affected Versions Artifex MuJS versions prior to 1.0.3 Description The issue is related to an integer overflow in the js strtod function due to incorrect exponent validation. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resol...
Exponent CMS install/index.php Code Execution
The vulnerability of the Exponent CMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the sc parameter in the install/index.php script...
CVE-2015-1177
Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...
Cross site scripting
Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...
CVE-2015-1177
Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...
CVE-2015-1177
Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...
CVE-2015-1177
Exponent CMS 2.3.2 is affected by a reflected cross-site scripting (XSS) vulnerability in index.php, exploitable via the src parameter in the search functionality. Technical details across sources show that an attacker can craft a URL containing malicious JavaScript (e.g., payloads like or onerr...
CVE-2015-1177: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Exponent CMS 2.3.2...
PT-2017-6475
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.2 Description A cross-site scripting XSS issue has been identified. XSS is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website, potentially leading to unauthorized...
DEBIAN-CVE-2017-9043
readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...
Code injection
readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...
CVE-2017-9043
readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...
CVE-2017-9043
readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...
Exponent CMS eaasController.php api Function SQL Injection (CVE-2017-7991)
A SQL injection vulnerability has been reported in Exponent CMS. The vulnerability is due to a lack of input validation on the apikey HTTP parameter by the api function. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to the affected page...
