PT-2018-15402 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An issue in S-CMS allows SQL Injection via the P no field in the "bank/callback1.php" API endpoint. Recommendations: For S-CMS version 3.0, update to a version that includes a fix for this issue, or as a tempora...

S-CMS SQL Injection Vulnerability (CNVD-2018-26676)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the bank/callback1.php file in S-CMS version 3.0, which stems from the program's failure to filter the 'Pno' field, and can be exploited by remote attackers to execute SQL statements with the...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

PT-2022-13608 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to a Segmentation Fault caused by MP4Box -lsr in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later t...

CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

SQL injection vulnerability in ESPCMS P8 frontend Me***.php file

ESPCMS is an enterprise website management system built on LAMP development. A SQL injection vulnerability exists in the ESPCMS P8 frontend Me.php file. An attacker can use this vulnerability to obtain sensitive information from the database...

Design/Logic Flaw

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19843

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

QEMU Denial of Service Vulnerability (CNVD-2018-26706)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in the hw/9pfs/cofile.c and hw/9pfs/9p.c files in QEMU. An attacker can exploit this vulnerability to cause a...

p-51headhunters.de XSS vulnerability

Open Bug Bounty ID: OBB-695843 Description| Value ---|--- Affected Website:| p-51headhunters.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

p-supply.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-688903 Description| Value ---|--- Affected Website:| p-supply.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

p-a-i.de XSS vulnerability

Open Bug Bounty ID: OBB-687687 Description| Value ---|--- Affected Website:| p-a-i.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the c3p0 gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLASS ...

d-p-a.nl XSS vulnerability

Open Bug Bounty ID: OBB-685594 Description| Value ---|--- Affected Website:| d-p-a.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

p-nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-683530 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

UBUNTU-CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

DEBIAN-CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

openSUSE Security Update : zsh (openSUSE-2018-1094)

This update for zsh to version 5.6.2 fixes the following issues : These security issues were fixed : - CVE-2018-0502: The beginning of a ! script file was mishandled, potentially leading to an execve call to a program named on the second line bsc1107296 - CVE-2018-13259: Shebang lines exceeding 6...

Dell EMC RSA Authentication Manager Operations Console Cross-Site Scripting Vulnerability

Dell EMC RSA Authentication Manager is a centralized suite of binary authentication software from Dell, Inc. that centralizes the management of binary authentication across physical sites. The software centralizes the management of binary identities, security tokens, methods, and users across...