1845 matches found
Code injection
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
CVE-2019-18819
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18819
Eximious Logo Designer 3.82 is affected by CVE-2019-18819, described as a user-mode write access conflict in ExiVectorRender!StrokeText_Blend+0x…3a7. Multiple sources (CNVD-2019-40495, RH: CVE-2019-18819, NVD) corroborate a vulnerability path within the logo design software that can lead to abnor...
CVE-2019-18821
CVE-2019-18821 affects EximiousSoft Logo Designer 3.82. The connected sources describe a user-mode write access conflict starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x53 (0x53). Several documents note potential denial of service due to this vuln...
CVE-2019-18821
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
CVE-2019-18820
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...
CVE-2019-18820
EximiousSoft Logo Designer 3.82 is affected by a heap corruption vulnerability starting at ntdll!RtlpNtMakeTemporaryKey+0x1a78. Multiple sources (CNVD-2019-40494, RH/CVE-2019-18820, NVD entry CVE-2019-18820) describe this as a heap corruption issue that can lead to denial of service. The CNVD ent...
WordPress kiwi-logo-carousel plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. kiwi-logo-carousel is a rotating effect plugin used in it. A cross-site request forgery vulnerability exists in WordPress kiwi-logo-carousel plugin...
Siemens LOGO! 24CE PLC Detection
Binary data 765135.prm...
Siemens LOGO!8 PLC < 1.82.02 Improper Restriction within Memory Buffer or Session Fixation DoS (ICSA-19-162-03)
Binary data 720304.prm...
Siemens LOGO!8 BM PLC Missing Authentication and Plaintext Storage of a Password (ICSA-19-134-04)
Binary data 720307.prm...
Siemens LOGO! 230RCE PLC Detection
Binary data 765138.prm...
Siemens LOGO! 12/24RCE PLC Detection
Binary data 765136.prm...
Siemens LOGO! 24RCE PLC Detection
Binary data 765137.prm...
Unspecified Vulnerability in CloudBees Jenkins GitLab Logo Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . GitLab Logo Plugin is used in one of the...
CVE-2015-9434
The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...
CVE-2015-9434
The CVE relates to the WordPress plugin kiwi-logo-carousel prior to version 1.7.2, where CSRF enables cross-site scripting (XSS) via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or the tab_flags_order parameter. The underlying issue is CSRF that allows an authenticated attack...
CVE-2015-9434
The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...
Joomla! < 3.9.12 XSS Vulnerability
Joomla! is prone to a cross-site scripting vulnerability due to inadequate escaping, which makes attacks using the logo parameter of the default templates possible. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...