613 matches found
openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()
A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...
PT-2020-2776 · Openjpeg +6 · Openjpeg +6
Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 2.3.1 through 2020-01-28 Description: The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function of the OpenJPEG library, specifically in the openjp2/t1.c file when qmfbid==1. This can ...
Cisco Data Center Network Manager REST API Authentication Bypass Vulnerability
Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A REST API authentication bypass vulnerability exists in Cisco Data Center Network...
Cisco Data Center Network Manager Path Traversal Vulnerability
Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A path traversal vulnerability exists in the Application Framework feature in Cisc...
WordPress Unauthorized Operation Vulnerability (CNVD-2020-03944)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress versions prior to 5.3.1, which stems from a lack of access contro...
WordPress Cross-Site Scripting Vulnerability (CNVD-2020-02548)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress versions prior to 5.3.1. The vulnerability stems from...
lilo Information Disclosure Vulnerability
lilo is a Linux bootstrap program. An information disclosure vulnerability exists in lilo version 23.1, which stems from the program setting /etc/lilo.conf to globally readable. No details of the vulnerability are available at this time...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
PT-2019-5223 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions 3.7 through 5.3.0 Description: The issue is related to the wp targeted link rel function in WordPress, which can be exploited to result in a stored cross-site scripting XSS vulnerability. This vulnerability can be used by a...
DEBIAN-CVE-2019-9854
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...
PT-2019-12124 · Red Lion Controls · Crimson
Name of the Vulnerable Software and Affected Versions: Red Lion Controls Crimson versions 3.0 and prior Red Lion Controls Crimson version 3.1 prior to release 3112.00 Description: The issue allows an attacker to access configuration files due to the use of a hard-coded password for encrypting...
AdPlug Resource Management Error Vulnerability
AdPlug is an AdLib sound player library written in C++. A resource management error vulnerability exists in the Cu6mPlayer class of the u6m.h file in AdPlug version 2.3.1. No details of the vulnerability are provided at this time...
TheHive Elevation of Privilege Vulnerability
TheHive is a scalable open source security incident response platform. An elevation of privilege vulnerability exists in the User API in versions of TheHive prior to 2.13.4 and 3.x prior to 3.3.1, which can be exploited by an attacker with read-only or read/write access to escalate privileges to...
UBUNTU-CVE-2019-10069
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly...
PT-2019-19927 · Unknown · Donation Plugin/Fundraising Platform
Name of the Vulnerable Software and Affected Versions: Donation Plugin and Fundraising Platform versions prior to 2.3.1 Description: The issue concerns a cross-site scripting XSS vulnerability in the csv export functionality of the wp-admin/edit.php page. Recommendations: For versions prior to...
PT-2018-15425 · Aqua Security +3 · Tcpreplay +3
Name of the Vulnerable Software and Affected Versions: Tcpreplay versions prior to 4.3.1 Description: The issue is a heap-based buffer over-read in the packet2tree function located in tree.c. This indicates a problem where more data is read from a buffer than it actually contains, potentially...
radare2 'r_bin_dyldcache_extract' function heap buffer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rbindyldcacheextract' function in the libr/bin/format/mach0/dyldcache.c file in radare2 versions prior to 3.1.1. An attacker can exploit this vulnerability to cause a denial ...
IBM Cloud Private Information Disclosure Vulnerability (CNVD-2018-26025)
IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A security vulnerability exists in IBM Cloud Private version 3.1.0, which stems from the program's failure to use a secure channel e.g., SSL to...