3281 matches found
Mozilla: Out-of-bounds write with malicious MAR file
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur. Thi...
YMFE YApi Cross-Site Scripting Vulnerability
YMFE YApi is a visual interface management platform. A cross-site scripting vulnerability exists in the item name field in YMFE YApi version 1.3.23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability (CNVD-2019-03308)
The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to execute code due to the program failing to detect the...
memcached: Integer Overflow in items.c:item_free()
memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:itemfree that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service...
DEBIAN-CVE-2018-14613
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...
CVE-2018-14613
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...
CVE-2018-14613
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...
CVE-2018-14613
CVE-2018-14613 affects the Linux kernel up to 4.17.10. It involves an invalid pointer dereference in io_ctl_map_page() when mounting/operating a crafted btrfs image, caused by a lack of block group item validation in fs/btrfs/tree-checker.c (check_leaf_item). The issue yields a local, likely kern...
CVE-2018-14613
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...
Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they should not have access to view (CVE-2016-8987)
Summary IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they should not have access to view. Vulnerability Details CVEID: CVE-2016-8987 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they...
How to do an Application Item Restore using Standalone Veeam Agent Backups in a Cloud Connect Repository
Article Applicability This article documents a method for performing Application Item Restore from restore points created by a Standalone Veeam Agent for Microsoft Windows deployment and stored in a Cloud Connect Repository. For Veeam Agent for Microsoft Windows deployments managed by a tenant's...
SITEMAKIN SLAC SQL Injection Vulnerability
SITEMAKIN SLAC Site Login and Access Control is a website login and access control software. A SQL injection vulnerability exists in the 'myitemsearch' parameter of the users.php file in SITEMAKIN SLAC version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
preferredbuildings.com XSS vulnerability
Open Bug Bounty ID: OBB-623068 Description| Value ---|--- Affected Website:| preferredbuildings.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Persistent cross site scripting / Cross site request forgery Date: 2018-05-20 Dork: N/A Exploit Author: borna nematzadeh L0RD Vendor Homepage: https://www.codegrape.com/item/flippy-damnfacts-viral-fun-facts-sharing-script/36...
CVE-2018-9969
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA...
Valve: Unfiltered input allows for XSS in "Playtime Item Grants" fields
Enter "test in any of the 3 fields, save it and reload the page. Impact Stored XSS, could possibly break some internal features too as the stored value is not an integer. The hacker selected the Cross-site Scripting XSS - Stored weakness. This vulnerability type requires contextual information fr...
MGASA-2018-0247 Updated perl packages fix security vulnerability
GwanYeong Kim reported that 'pack' could cause a heap buffer write overflow with a large item count CVE-2018-6913...
CVE-2017-2606
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...
CVE-2017-2606
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...