3797 matches found
PT-2019-5656
Name of the Vulnerable Software and Affected Versions file version 5.35 Description The issue is related to a stack-based buffer over-read in the do core note function in readelf.c in libmagic.a. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability...
PT-2019-5655
Name of the Vulnerable Software and Affected Versions file version 5.35 Description The issue is related to a stack-based buffer over-read in the do bid note function in readelf.c in libmagic.a. This is connected to file printf and file vprintf. Exploitation of the issue may allow a remote attack...
PT-2019-5198
Name of the Vulnerable Software and Affected Versions File version 5.35 Description The issue is related to a buffer overflow in the do core note function of the File utility, which is used to determine the types of given files. This can be exploited by a remote attacker to cause a denial of...
PT-2019-19036
Name of the Vulnerable Software and Affected Versions imcat version 4.5 Description The issue is related to Stored XSS, which occurs via the "root/run/adm.php" API endpoint, specifically through the fminstopnote parameter. Recommendations For imcat version 4.5, avoid using the fminstopnote...
CVE-2019-8436
CVE-2019-8436 affects imcat 4.5 and is caused by Stored XSS via the root/run/adm.php fm[instop][note] parameter. The connected sources consistently report this vulnerability without providing specific patch details or affected product revisions beyond imcat 4.5. The exploitation, scope, and remed...
CVE-2019-8436
imcat 4.5 has Stored XSS via the root/run/adm.php fminstopnote parameter...
UBUNTU-CVE-2019-8905
docorenote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintable, a different vulnerability than CVE-2018-10360...
UBUNTU-CVE-2019-8906
docorenote in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused...
UBUNTU-CVE-2019-8907
docorenote in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service stack corruption and application crash or possibly have unspecified other impact...
CVE-2019-8419
VNote 2.2 has XSS via a new text note...
CVE-2019-8419
VNote 2.2 has XSS via a new text note...
CVE-2019-8419
CVE-2019-8419 affects VNote 2.2 and describes an XSS vulnerability that can be triggered via a new text note. The primary source (NVD) confirms XSS as the issue; no exploitation vectors, impacted versions beyond 2.2, or remediation steps are provided in the connected documents. The CVE entry list...
PT-2019-19022
Name of the Vulnerable Software and Affected Versions VNote version 2.2 Description The issue is related to a Cross-Site Scripting XSS flaw that can be triggered via a new text note. Recommendations For VNote version 2.2, update to a version that includes a fix for this issue, as no specific...
elfutils denial of service vulnerability (CNVD-2019-07028)
elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries, finding and manipulating DWARF debug data, symbols, thread states, and stack traces for processes and kernel files on GNU/Linux. A denial of service vulnerability exists in elfcvtnote in...
CVE-2018-16106
This CVE entry is rejected and not used; it does not represent an active vulnerability.
Marvell Avastar Wi-Fi Vulnerability
The CERT Coordination Center CERT/CC has released information on a vulnerability affecting Marvell Avastar wireless system on chip SoC models. An attacker could exploit this vulnerability to take control of an affected system. The National Cybersecurity and Communications Integration Center NCCIC...
Security Bulletin: Vulnerability in SSLv3 affects IBM Systems Director (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Systems Director. Vulnerability Details Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgrade...
Security Bulletin: Upward Integration Module for HP Openview Operations for Windows is affected by multiple vulnerabilities in IBM Java SDK
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that is shipped with Upward Integration Module for HP Openview Operations for Windows. These issues were disclosed as part of the Java Technology Edition Quarterly CPU - January 2015. Vulnerability Details Abstract Ther...
elfutils 'ebl_object_note' function out-of-bounds read vulnerability
elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries. libebl is one of the libraries that provides ELF access. An out-of-bounds read vulnerability exists in the 'eblobjectnote' function of the eblobjnote.c file of libebl in elfutils version 0.175. ...