6781 matches found
Centreon Web Code Injection Vulnerability
Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A code injection vulnerability exists in the getStats.php file in versions of Centreon Web prior to...
ZTE ZXCDN IAMWEB Code Injection Vulnerability
ZTE ZXCDN IAMWEB is an authentication product from ZTE Corporation ZTE, China. A code injection vulnerability exists in ZTE ZXCDN IAMWEB version V6.01.03.01. The vulnerability stems from a network system or product not properly filtering special elements of external input data during the...
IrfanView Code Issue Vulnerability
IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A code issue vulnerability exists in IrfanView version 4.53. The vulnerability stems from an improperly designed or implemented...
kernel: null-pointer dereference in hci_uart_set_flow_control
A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash...
CVE-2019-18278
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
CVE-2019-18278
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
Code injection
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
CVE-2019-18278
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
CVE-2019-18278
CVE-2019-18278 concerns VideoLAN VLC media player 3.0.8 on Windows when using libqt, where data from a faulting address can control code flow at libqt_plugin!vlc_entry_license__3_0_0f+0x... The core description in both the NVD entry and Red Hat advisory is consistent: the vulnerability relates to...
CVE-2019-18278
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
safer-eval code injection vulnerability
safer-eval is a security evaluation module that runs in node and browsers. A code injection vulnerability exists in versions prior to safer-eval 1.3.2, which arises from the failure of a network system or product to properly filter specific elements of externally input data during the constructio...
Atlassian Crowd Code Injection Vulnerability
Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A code injection vulnerability exists in Atlassian Crowd versions prior to 2.10.2, whi...
WordPress events-manager plugin code injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. events-manager is an events management plugin used in it. A code injection vulnerability exists in the WordPress events-manager...
CVE-2019-16417
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...
CVE-2019-16417
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...
Design/Logic Flaw
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...
CVE-2019-17243
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000003155...
CVE-2019-17244
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000001d8a...
CVE-2019-16417
CVE-2019-16417 affects HRworks FLOW 3.36.9. The vulnerability is described as XSS via the purpose of a travel-expense report. The connected documents confirm the affected product/version and the nature of the issue, but do not provide a root-cause analysis, specific vulnerable parameter/file, or ...