MetadataExtractor Stack Overflow Vulnerability

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. A security vulnerability exists in MetadataExtractor version 2.1.0. An attacker can exploit this vulnerability to cause a denial of service stack consumption...

antSword Cross-Site Scripting Vulnerability

antSword is an open source cross-platform website management tool. A cross-site scripting vulnerability exists in the database configuration in versions of antSword prior to 2.1.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

UBUNTU-CVE-2019-10191

A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol...

PT-2019-13238 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: The issue is a heap-based buffer over-read in the JBIG2Stream::readTextRegionSeg function, which can be triggered by sending a crafted PDF document to the pdftoppm tool. This might allow an attacker to cause...

CVE-2018-18802

The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/modusers/controller.php?action=edit...

PT-2019-16900 · Ibm · Ibm Tivoli Netcool Impact

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Netcool/Impact version 7.1.0 Description: The issue allows for remote execution of commands by a low-privileged user, enabling remote code execution. This can lead to the execution of arbitrary code on the system, resulting in...

CVE-2019-4068

IBM Intelligent Operations Center IOC 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system. IBM X-Force ID: 157013...

PT-2019-16878 · Ibm · Ibm Intelligent Operations Center

Name of the Vulnerable Software and Affected Versions: IBM Intelligent Operations Center IOC versions 5.1.0 through 5.2.0 Description: The issue arises from improper file type validation, allowing an attacker to upload malicious content. Recommendations: For versions 5.1.0 through 5.2.0, update t...

PT-2025-6281 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira versions 7.6.4 through 8.1.0 Description: A CSRF issue exists due to the login form not requiring a CSRF token. This allows an attacker to log a user into the system under an unexpected account. Recommendations: For Atlassian...

UBUNTU-CVE-2019-10024

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters...

FlexNet Publisher Denial of Service Vulnerability (CNVD-2019-08559)

Flexera Software FlexNet Publisher FLEXlm is the core software license management component of the Entitlement Relationship Management Solution from Flexera Software. The product provides software and hardware manufacturers with the ability to price, package and customize software license terms. ...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-05295)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS version 4.1.0 in the existence of cross-site scripting vulnerability, a remote attacker can / index.php?m=core&f=map&v=baidumap URL 'x' and 'y' parameters to exploit the The...

WTCMS Denial of Service Vulnerability

WTCMS is a ThinkPHP-based content management system CMS. A denial of service vulnerability exists in WTCMS version 1.0, which can be exploited by remote attackers to cause a denial of service resource consumption with the help of specially sized captcha images...

CVE-2019-2407

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

WUZHI CMS SQL Injection Vulnerability (CNVD-2019-03304)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the coreframe/app/coupon/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerabili...

S-CMS File Read Vulnerability

S-CMS is a content management system CMS based on PHP and MySQL. A file read vulnerability exists in the admin/download.php file in S-CMS version 1.0, which can be exploited by an attacker to read files with the help of the 'DownName' parameter...

WavPack Denial of Service Vulnerability (CNVD-2019-06791)

WavPack is an open source, free audio lossless compression software. A security vulnerability exists in the 'WavpackPackInit' function in the packutils.c file of the libwavpack.a static link library in WavPack 5.1.0 and earlier versions. An attacker can exploit this vulnerability to cause a denia...

CVE-2018-16089

In System Management Module SMM versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as the root user...

PT-2020-6122 · Google +8 · Libwebp +8

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A flaw was found in libwebp due to a use-after-free caused by a thread being killed too early. The highest threat from this issue is to data confidentiality and integrity as well as system...

PointOfSales SQL Injection Vulnerability

PointOfSales is a point of sale system. The system includes features such as inventory management, customer management and performance management. A SQL injection vulnerability exists in PointOfSales version 1.0. A remote attacker can exploit this vulnerability to view, add, modify, or delete...