178 matches found
CVE-2021-27516
URI.js aka urijs before 1.19.6 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path...
PT-2021-28059
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...
PT-2020-6040
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to a security mechanism flaw in the Exim message transfer agent. It allows exposure of a file descriptor to an unintended control sphere due to a privileged pipe lacking a...
PT-2020-22559
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: ndpi netbios name interpret, ndpi int netbios add...
PT-2020-22353
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the ndpi netbios name interpret, ndpi int netbios add...
PT-2020-21844
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which can cause a crash. The crash involves the ndpi netbios name interpret, ndpi int netbios add connection...
Malicious package may avoid detection in python auditing
Python Auditing Vulnerability Demonstrates how a malicious package can insert a load-time poison pill to avoid detection by tools like Safety. Tools that are designed to find vulnerable packages can not ever run in the same python environment that they are trying to protect. Usage Install safety,...
Design/Logic Flaw
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
CVE-2019-8924
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
PT-2019-19260
Name of the Vulnerable Software and Affected Versions XAMPP versions prior to 5.6.8 Description The issue allows for XSS attacks via the cds-fpdf.php file, specifically through the interpret or titel parameters. This product has been discontinued. Recommendations For versions prior to 5.6.8,...
CVE-2019-8924: Improper Neutralization of Input During Web Page Generation
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
PT-2019-18682
Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware versions prior to 2018.12 Description The issue allows an attacker to bypass ACLs due to the lack of FILE DEVICE SECURE OPEN in Interpreted Device Characteristics. This leads to improper protection of files and directorie...
imagemagick/ping_mvg_fuzzer: Crash in GlobExpression
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5703754605658112 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN RE...
[SECURITY] Fedora 23 Update: kf5-kjs-5.24.0-1.fc23
KDE Frameworks 1 Tier 1 functional module with JavaScript interpret...
Ttalk-Translate Chat,Interpret - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ttalk-Translate Chat,Interpret published at the 'play' market has multiple vulnerabilities...
PT-2013-3337
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 SeaMonkey versions prior to 2.20 Description A heap-based buffer underflow issue exists in the cryptojs interpret key gen type function, allowing remote attackers to execute arbitrary code or cause a deni...
RedHat Update for python RHSA-2011:0491-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DEBIAN-CVE-2010-4054
The gstype2interpret function in Ghostscript allows remote attackers to cause a denial of service incorrect pointer dereference and application crash via crafted font data in a compressed data stream, aka bug 691043...