343 matches found
Deserialization of untrusted data
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper aka Redis Wrapper before 0.3.0 allows attackers to execute arbitrary scripts...
PYSEC-2019-46
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper aka Redis Wrapper before 0.3.0 allows attackers to execute arbitrary scripts...
CVE-2019-17206
The CVE-2019-17206 entry describes an Uncontrolled deserialization of a pickled object in the Frost Ming rediswrapper (Redis Wrapper) code path, specifically in models.py, that existed prior to version 0.3.0. This vulnerability allows an attacker to execute arbitrary scripts due to unsafe pickle ...
CVE-2019-17206
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper aka Redis Wrapper before 0.3.0 allows attackers to execute arbitrary scripts...
CVE-2019-16705
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
CVE-2019-16705
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
CVE-2019-16705
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
Out-of-bounds
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
UBUNTU-CVE-2019-16705
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
CVE-2019-16705
Ming (aka libming) 0.4.8 contains an out-of-bounds read vulnerability in the OpCode() function in decompile.c within libutil.a. This CVE is documented across multiple feeds; the core detail explicitly states the out-of-bounds read in libutil.a’s OpCode(). Affected component: libming/libutil.a (st...
CVE-2019-16705
Ming aka libming 0.4.8 has an out of bounds read vulnerability in the function OpCode in the decompile.c file in libutil.a...
SQL Injection Vulnerability in Website Construction System of Shanghai Ming Enterprise Information Technology Co.
Shanghai Ming Enterprise Information Technology Co., Ltd. is a company engaged in website construction, Internet marketing, domain name hosting and Internet application development. There is a SQL injection vulnerability in the website construction system of Shanghai Ming Enterprise Information...
CVE-2019-12982
Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...
CVE-2019-12981
Ming aka libming 0.4.8 has an "fill overflow" vulnerability in the function SWFShapesetLeftFillStyle in blocks/shape.c...
CVE-2019-12980
In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...
CVE-2019-12980
In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...
CVE-2019-12981
Ming aka libming 0.4.8 has an "fill overflow" vulnerability in the function SWFShapesetLeftFillStyle in blocks/shape.c...
CVE-2019-12982
Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...