WordPress WP Ulike Access Control Error Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.WP ULike is used in one of the website content interactive plugin. An access control error vulnerability exists in...

PT-2018-9409

Name of the Vulnerable Software and Affected Versions WP ULike versions 2.8.1 through 3.1 Description The issue is related to Incorrect Access Control in AJAX, allowing anybody to delete any row in certain tables. This can be exploited by making an AJAX request. Recommendations For WP ULike...

Hikvision(海康威视) /data/fetchPlanStatus.php 参数rows 时间盲注

No description provided by source...

MariaDB Server 10.0.x < 10.0.22 Multiple DoS Vulnerabilities

Binary data 9284.prm...

DEBIAN-CVE-2016-3981

Heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file...

UBUNTU-CVE-2016-3981

Heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file...

Microsoft Internet Explorer CTableLayout AddRow Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

PT-2016-1709

Name of the Vulnerable Software and Affected Versions OptiPNG versions prior to 0.7.6 Description The issue is related to a heap-based buffer overflow in the bmp read rows function, which can be triggered by a crafted image file. This could allow remote attackers to cause a denial of service, suc...

PT-2016-5054

Name of the Vulnerable Software and Affected Versions OptiPNG versions prior to 0.7.6 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory write and crash. This is achieved through a series of delta escapes in a crafted BMP image, specifically...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01131)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/tiff.c file in FFmpeg versions prior to 2.8.6, which stems from the program failing to properly validate the RowsPerStrip value and the...

ALPINE-CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

DEBIAN-CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

The vulnerability of the IBM DB2 database management system allows attackers to circumvent existing access restrictions and delete arbitrary rows from tables.

The vulnerability of the Data Movement implementation in the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions and delete arbitrary rows from the tables...

CVE-2015-1922

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

Design/Logic Flaw

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

CVE-2015-1922

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

CVE-2015-1922

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

CVE-2015-1922: Improper Access Control

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

PT-2015-2779

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through FP10 IBM DB2 versions 9.8 through FP5 IBM DB2 version 10.1 before FP5 IBM DB2 versions 10.5 through FP5 Description The issue is related to the Data Movement implementation in IBM DB2, which has inadequate access...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to 1...