3965 matches found
CVE-2018-7109
HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...
jhead denial of service vulnerability (CNVD-2018-19092)
jhead is a tool for modifying JPEG file information. A denial of service vulnerability exists in the 'ProcessGpsInfo' function of the gpsinfo.c file in jhead version 3.00, which can be exploited by remote attackers to cause a denial of service with the help of a malicious JPEG file...
JDK: DoS in the java.math component
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...
ALPINE-CVE-2018-17082
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c...
TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07049)
The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...
TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07045)
The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...
com.slyak:slyak-web-bootstrap (>=1.0.3.RELEASE <=1.0.4.RELEASE), de.smartsquare.squit:de.smartsquare.squit.gradle.plugin (>=2.0.0 <=2.2.0) +23 more potentially affected by CVE-2018-14042 via org.webjars:bootstrap (>=4.0.0 <=4.1.1)
org.webjars:bootstrap MAVEN version =4.0.0, =1.0.3.RELEASE, =2.0.0, =2.1.0, =2.0.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.3 - org.orienteer:orienteer-architect =1.4 - org.orienteer:orienteer-birt =1.4 - org.orienteer:orienteer-bpm =1.4 - org.orienteer:orienteer-camel =1.4 -...
WordPress plugin Quizlord cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Quizlord plugin is used in one of the plugin in the site to add testing capabilities. A cross-site scripting...
CVE-2018-12807
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification...
JDK: DoS in the java.math component
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...
Apache mod_perl Code Execution Vulnerability
Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server. modperl is an embedded Perl compiler Apache HTTP Server . A security vulnerability exists in Apache modperl versions 2.0 through 2.0.10. The vulnerability can be exploited to execute arbitrary...
Red Hat Libvirt Denial of Service Vulnerability (CNVD-2018-16495)
Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat Libvirt versions...
Arbitrary File Deletion Vulnerability in LibreHealthIO LH-EHR
LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file deletion vulnerability exists in the export template in the LibreHealthIO LH-EHR REL-2.0.0 release. An attacker can exploit this vulnerability to cause a denial of servic...
CVE-2018-2442
In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid...
PHP Scripts Mall Chartered Accountant:Auditor Website Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Chartered Accountant:Auditor Website is a financial auditing website system script by PHP Scripts Mall India. The system includes features such as profile management, feedback management, order management and document upload management. A cross-site request forgery vulnerability...
PHP Scripts Mall hotel-booking-script Denial of Service Vulnerability
PHP Scripts Mall hotel-booking-script is a hotel booking system script by PHP Scripts Mall India, which includes features like advanced CMS management, review management and booking management. A denial of service vulnerability exists in PHP Scripts Mall hotel-booking-script version 2.0.4, which...
Unauthorized Access Vulnerability in txjcms v4.0
Skywalker Networks is an Internet integrated service platform provider. An unauthorized access vulnerability exists in txjcms v4.0. An attacker can exploit this vulnerability to gain control of the web server...
PHP Scripts Mall PHP Template Store Script Cross-Site Scripting Vulnerability
PHP Scripts Mall PHP Template Store Script is a set of scripts for selling website templates online by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Template Store Script version 3.0.6. The vulnerability can be exploited by a remote attacker to inject...
Google Android Media framework remote code execution vulnerability (CNVD-2018-18769)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...