CVE-2018-1000165: Incorrect Permission Assignment for Critical Resource

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later...

PT-2018-9335

Name of the Vulnerable Software and Affected Versions LightSAML versions prior to 1.3.5 Description The issue is related to Incorrect Access Control in signature validation in readers, located in src/LightSaml/Model/XmlDSig/, which can lead to impersonation of any user from the Identity Provider...

Use after free in File#initilialize_copy

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

PT-2018-9748

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 1.4.1 Description: A use-after-free issue exists in the Fileinitialize copy function, located in src/io.c. This could potentially allow an attacker to execute arbitrary code if they can cause Ruby code to be run...

CVE-2018-10199: Use After Free

In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::Fileinitilializecopy. An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code...

CVE-2018-10191

In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrbvmexec when handling OPGETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code...

CVE-2018-10191: Integer Overflow or Wraparound

In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrbvmexec when handling OPGETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code...

src-reizen.nl XSS vulnerability

Open Bug Bounty ID: OBB-596669 Description| Value ---|--- Affected Website:| src-reizen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Samsung Mobile Device Email Application Cross-Site Scripting Vulnerability

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android M is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Email application is one of the email applications. Email application is one of the email...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

PT-2018-18882

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with M6.0 software Description The issue affects the Email application, allowing for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute. Recommendations For Samsung mobile...

CVE-2018-9140: Improper Neutralization of Input During Web Page Generation

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

CVE-2018-8978: Improper Neutralization of Input During Web Page Generation

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

PT-2018-18756

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue is related to a crafted src attribute of an IMG element within a URI, which can lead to XSS. Recommendations For Open-AudIT Professional version 2.1, consider validating and sanitizing...

PT-2018-3324

Name of the Vulnerable Software and Affected Versions: GNOME file-roller versions prior to 3.29.91 Description: The issue allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. This is related to the sanitize filename functio...

CVE-2018-1000070

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...

CVE-2018-1000070: Improper Control of Generation of Code

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...