CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

Google Chrome Memory Misreference Vulnerability (CNVD-2019-03620)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in ResourceCoordinator in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to corrupt the heap with the help of specially...

Google Chrome Security Bypass Vulnerability (CNVD-2018-22395)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to bypass site isolation restrictions with the help of Blob URLS...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2019-03616)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. A remote attacker could exploit the...

PT-2018-12628 · Red Hat · Openshift Container Platform

Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform versions prior to 3.7 Description: The issue is related to an out-of-bounds write that can occur when patching an OpenShift object using the oc patch functionality. This can be exploited to cause a denial of servi...

CraftedWeb Cross-Site Scripting Vulnerability (CNVD-2018-18899)

CraftedWeb is a CMS Content Management System for game servers. A cross-site scripting vulnerability exists in CraftedWeb versions 2013-09-24 and earlier, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'p' parameter...

Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54478)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

NVIDIA GeForce Experience Information Disclosure Vulnerability

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. An information disclosure vulnerability exists in NVIDIA GeForce Experience versions prior to 3.14.1, which can be exploited by attackers to conduct man-in-the-middle attacks and obtain sensitive information...

Linux kernel denial of service vulnerability (CNVD-2018-24547)

Linux kernel is the kernel used by the open source operating system Linux. crypto subsystem is one of the cryptographic subsystems. Linux kerne versions prior to 4.15-rc4 have a security vulnerability in the crypto subsystem. Each afalgctx, when released instead of aeadtfm, removes the null...

Google Chrome Skia Information Disclosure Vulnerability (CNVD-2018-20148)

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions prior to Google Chrome 63.0.3239.84, which stems from Skia...

CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15416

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read...

Geutebrueck re_porter cross-site scripting vulnerability

Geutebrueck is a video management system from GEUREBRÜCK, Germany. sreporter is one of the hybrid recorders for digital storage and video signal transmission for MPEG4 CCTV-Standard. A cross-site scripting vulnerability exists in Geutebrueck reporter 16 versions prior to 7.8.974.20. A remote...

Medium: mysql55

Issue Overview: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.5.60 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

Pimcore Cross-Site Request Forgery Vulnerability

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A cross-site request forgery vulnerability exis...

FreeBSD Denial of Service Vulnerability (CNVD-2020-38784)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A denial of service vulnerability exists in the ip fragmentation reorganization code in...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17198)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17194)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code...

PT-2018-13253 · Xkbcommon +5 · Xkbcommon +5

Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.2 Description: The issue allows local attackers to crash the xkbcommon parser by supplying a crafted keymap file. This is due to unchecked NULL pointer usage in resolve keysym in xkbcomp/parser.y, which can lea...