4277 matches found
Mozilla: Memory corruption as a result of incorrect style treatment
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...
MGASA-2021-0407 Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix security vulnerabilities: Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash CVE-2021-29980. Instruction reordering during JIT optimization resulted in a sequence of...
CVE-2021-29988
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...
UBUNTU-CVE-2021-29988
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...
Mozilla Firefox < 91.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 91.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-33 advisory. - Mozilla developers and community members Kershaw Chang, Philipp, Chris Peterson, and Sebastian Hengst reporte...
AT&T Labs Xmill ็ผๅฒๅบ้่ฏฏๆผๆด
AT&T Labs Xmill is a new tool for efficiently compressing XML data from AT&T Labs, USA. A security vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem function in AT&T Labs Xmill version 0.7. An attacker could exploit the vulnerability to remotely execute code...
Cross-Site Request Forgery (CSRF) in bigprof-software/online-invoicing-system
โ๏ธ Description csrf bug to mass delete item price ๐ต๏ธโโ๏ธ Proof of Concept bellow request is vulnerable to csrf attack. here csrf token checking, no refferrer checking . There is nothing to prevent csrf attack . POST /online-invoicing-system/app/itempricesview.php HTTP/1.1 Host: localhost User-Agent:...
Improper Privilege Management in amirsanni/mini-inventory-and-sales-management-system
๐ฅ BUG unprivileged user can update item ๐ฅ STEP TO REPDOUCE 1. From admin account goto https://1410inc.xyz/mini-inventory-and-sales-management-system/administrators and add new user callled user-B with basic role .\ 2. Now goto user-B account and here user-B cant see any item.\ Now user-B execute...
Improper Privilege Management in amirsanni/mini-inventory-and-sales-management-system
๐ฅ BUG unprivileged user can add item ๐ฅ STEP TO REPDOUCE 1. From admin account goto https://1410inc.xyz/mini-inventory-and-sales-management-system/administrators and add new user callled user-B with basic role .\ So, user-B cant add new item.\ 2. Now goto user-B account and here user-B cant see...
jenkins: Stored XSS vulnerability on new item page
A flaw was found in jenkins. A cross-site scripting XSS vulnerability is possible due to display names and IDs of item types shown on the New Item page not being properly escaped. The highest threat from this vulnerability is to data confidentiality and integrity...
DEBIAN-CVE-2020-19488
An issue was discovered in boxcodeapple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilstitemRead...
UBUNTU-CVE-2020-19488
An issue was discovered in boxcodeapple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilstitemRead...
PT-2021-6487
Name of the Vulnerable Software and Affected Versions Gpac MP4Box version 0.8.0 Description The issue is related to an invalid read in the ilst item Read function, located in the box code apple.c component of the GPAC multimedia platform. This can lead to a Denial of Service. The vulnerability is...
Cross-site Scripting (XSS) - Stored in bigprof-software/online-invoicing-system
๐ฅ BUG xss via groupname in item ๐ฅ VERSION TESTED latest version as of 1/7/21 ๐ฅ IMPACT xss allow to execute arbitary javascript in vicitm account ๐ฅ STEP TO REPRODUCE 1. first goto http://localhost/online-invoice2/app/admin/pageEditGroup.php and add a new group and put bellow xss payload in...
CVE-2021-21670
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission...
PT-2021-9100
Name of the Vulnerable Software and Affected Versions LibreSSL versions 2.9.1 through 3.2.1 Description The issue is a heap-based buffer over-read in the do print ex function, which is called from asn1 item print ctx and ASN1 item print. Recommendations For LibreSSL versions 2.9.1 through 3.2.1,...
PT-2021-14713 ยท Jenkins ยท Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.299 and earlier Jenkins LTS versions 2.289.1 and earlier Description: The issue allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read...
CVE-2021-21670: Undefined Security Weakness
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission...
PT-2021-9101
Name of the Vulnerable Software and Affected Versions LibreSSL versions 2.9.1 through 3.2.1 Description The issue is related to an out-of-bounds read in the asn1 item print ctx function, which is called from asn1 template print ctx. Recommendations For versions 2.9.1 through 3.2.1, consider...
Phoenix Contact Classic Automation Worx Software Suite Buffer Overflow Vulnerability
Phoenix Contact Classic Automation is a division of Phoenix Contac Phoenix Contact, a German company that provides surplus parts and Phoenix Contact repair services. A security vulnerability exists in Software Suite 1.87 and prior versions, which stems from a vulnerability that can be exploited b...