93 matches found
CVE-2018-6345
The function numberformat is vulnerable to a heap overflow issue when its second argument $decpoints is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all...
icu/number_format_fuzzer: Crash in __msan_memset
Detailed report: https://oss-fuzz.com/testcase?key=6252124296970240 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x72f000010000 Crash State: msanmemset...
icu/number_format_fuzzer: Heap-buffer-overflow in icu_61::number::impl::DecimalQuantity::ensureCapacity
Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=4583921284022272 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cra...
CVE-2018-7194
Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...
Fortinet FortiGate FortiDB Cross-Site Scripting Vulnerability
Fortinet FortiGate FortiDB is a scalable database security solution developed by the United States Fita Fortinet. A cross-site scripting vulnerability exists in the Java number format exception handling in Fortinet FortiGate FortiDB versions prior to 4.4.2. A remote attacker can exploit this...
CVE-2012-6347
Multiple cross-site scripting XSS vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to 1 admin/auditTrail.jsf, 2 mapolicymgmt/targetsMonitorView.jsf, 3...
CVE-2017-16364
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference when handling number format dictionary entrie...
CVE-2017-16364: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference when handling number format dictionary entrie...
PHP 7.0.x < 7.0.12 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.12. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists in the SimpleXMLElement::asXML function within file ext/simplexml/simplexml.c. An unauthenticate...
FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability
Title: ====== FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability Date: ===== 2012-11-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=558 VL-ID: ===== 558 Common Vulnerability Scoring System: ==================================== 2.5 Introduction: ============...
FortiGate FortiDB 2kB 1kC / 400B Cross Site Scripting
Title: ====== FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability Date: ===== 2012-11-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=558 VL-ID: ===== 558 Common Vulnerability Scoring System: ==================================== 2.5 Introduction: ============...
FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability
Document Title: =============== FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=558 http://www.fortiguard.com/advisory/FG-IR-012-007.html CVE: 2012-6347 Release Date: ============= 2012-11-30...
FortiGate FortiDB 2kB 1kC / 400B Cross Site Scripting
FortiGate FortiDB 2kB 1kC and 400B suffer from a cross site scripting vulnerability. FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability Introduction: ============= Targeting large enterprises the FortiDB-2000B appliance provides scalable database security and compliance solution. Utilizi...