Double free

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

CVE-2018-8099

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

Integer overflow

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

DEBIAN-CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

CVE-2018-8099

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

Libgit2 Integer Overflow Vulnerability

libgit2 is a portable, pure C implementation of the Git core development kit , you can use it to write custom Git applications . An integer overflow vulnerability exists in the index.c:readentry function in versions of libgit2 prior to 0.26.2 when decompressing the length of a compressed prefix. ...

CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

PT-2018-3971

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.26.2 Description The issue is related to an integer overflow in the read entry function of the index.c component in libgit2. This overflow occurs while decompressing a compressed prefix length. The exploitation of...

CVE-2018-7653

In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter...

Flexible Poll SQL Injection Vulnerability

Flexible Poll is a dynamic online poll management system. A SQL injection vulnerability exists in Flexible Poll version 1.2. A remote attacker can inject SQL commands by sending the 'id' parameter to the index.php or mobilepreview.php file...

CVE-2018-5961

CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...

CVE-2017-17990

Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...

CVE-2017-17993

Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-01644)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the fourn/index.php fi...

Nice PHP FAQ Script SQL Injection Vulnerability

Nice PHP FAQ Script is a PHP-based website autoresponder script. A SQL injection vulnerability exists in Nice PHP FAQ Script. The vulnerability can be exploited to inject SQL commands by sending the 'nicetheme' parameter to the index.php file...

CVE-2017-15946

In the comtag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the tag parameter to index.php. The request method to execute is GET...

SQL Injection Vulnerability in APPCMS index.php File

APPCMS is a professional APP content management system. A SQL injection vulnerability exists in the index.php file of APPCMS version 1.3.855. An attacker can exploit this vulnerability to obtain sensitive database information or perform unauthorized operations...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2017-11315)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the user/index.php fil...