7224 matches found
Fedora 30 : clamav (2019-dcbfe89e39)
Drop [email protected] file bz1725810 ClamAV 0.101.5 is a security patch release that addresses the following issues. - CVE-2019-15961: A Denial-of-Service DoS vulnerability may occur when scanning a specially crafted email file as a result of excessively long scan times. The issue is resolved...
Amazon Linux AMI : glibc (ALAS-2019-1320)
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
Design/Logic Flaw
Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...
CVE-2019-10490
Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...
GHSA-89R3-RCPJ-H7W6 Path traversal attack on Windows platforms
Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...
The vulnerability of D-Link DIR-823G router’s microprogramming software lies in the lack of measures to clean incoming data in the SetStaticRouteSettings field. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures for cleaning incoming data in the SetStaticRouteSettings field. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel memory leak vulnerability (CNVD-2019-40154)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c ...
DEBIAN-CVE-2019-18807
Two memory leaks in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service memory consumption by triggering staticconfigbufprepareforupload or sja1105inhibittx failures, aka CID-68501df92d11...
UBUNTU-CVE-2019-18807
Two memory leaks in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service memory consumption by triggering staticconfigbufprepareforupload or sja1105inhibittx failures, aka CID-68501df92d11...
Cisco Small Business RV320 and RV325 Dual Gigabit WAN Routers Issues
Cisco firmware for Cisco RV320 and RV325 Dual Gigabit WAN VPN Routers is affected by the following issues: Static certificates and keys Hardcoded password hashes Multiple vulnerabilities in third-party software TPS components Static Certificates and Keys Two static X.509 certificates with the...
Mail.ru: unauthorized access to add admin endpoint
Access to static page within media-poll.mail.ru admin interface was not restricted. Access to static page does not grant attacker the ability to perform any actions or access any sensitive information...
The vulnerability of the CGI handler in NETGEAR’s integrated router software, the R7800, allows a hacker to execute arbitrary code.
The vulnerability of the CGI handler in NETGEAR R7800 integrated routing software lies in buffer overflow in static memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the wlg_adv.cgi CGI handler in NETGEAR’s R8000 and R8500 routers allows a hacker to perform arbitrary actions.
The vulnerability of the wlgadv.cgi CGI handler in NETGEAR’s R8000 and R8500 routers stems from buffer overflows in static memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...
Slither v0.6.7 - Static Analyzer For Solidity
Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...
CVE-2019-17671
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled...
CVE-2019-17671
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled...
DEBIAN-CVE-2019-17671
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled...
Design/Logic Flaw
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled...
