517 matches found
DEBIAN-CVE-2019-17666
rtlp2pnoaie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow...
b3log Symphony cross-site scripting vulnerability (CNVD-2019-34789)
b3log Symphony Sym is a modern open source community platform written in the Java language. A cross-site scripting vulnerability exists in b3log Symphony versions prior to 3.6.0, which stems from the lack of proper validation of client-side data by the WEB application and can be exploited by an...
PT-2019-4470 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.6 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/net/ieee802154/atusb.c driver. This bug can be triggered by a malicious USB device, potentially...
DEBIAN-CVE-2019-1010228
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress file dcrledec.h, line 122. The attack vector is: Many scenarios of DICOM file processing e.g. DICOM to image...
PT-2019-11610 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7.1 Moodle versions prior to 3.6.5 Moodle versions prior to 3.5.7 Description: A flaw was found in the XML loading/unloading admin tool where a sesskey CSRF token was not being utilized. Recommendations: For version...
IBM TRIRIGA Application Platform Information Disclosure Vulnerability (CNVD-2019-13385)
The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...
DEBIAN-CVE-2019-3829
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption double free vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected...
Unspecified Vulnerability in Moodle (CNVD-2019-35814)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle versions 3.6 to 3.6.2 and 3.5 to 3.5.4, which can be exploited by attackers to gain...
CVE-2019-1000023
OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...
Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability
The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...
CVE-2018-11719
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...
CVE-2018-1000513
LimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting XSS vulnerability in Boxes that can result in JS code execution against LimeSurvey admins. This vulnerability appears to have been fixed in 3.6.x...
Buffer Overflow Vulnerability in 2345 Security Guard
2345 is a network software that protects the user's safety on the Internet. A buffer overflow vulnerability exists in the NetFirewall.sys driver file in version 3.6 of 2345 Security Guard, which can be exploited by an attacker to send very long data resulting in arbitrary code execution...
YzmCMS v3.6 Existing Override Vulnerability
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A vulnerability exists in YzmCMS v3.6. An attacker can exploit the vulnerability to access information beyond the authority...
Python 'Wave_read._read_fmt_chunk' function denial of service vulnerability
Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in the 'waveread.readfmtchunk' function in the Lib/wave.py file in Python...
SilverStripe CSV Excel Macro Injection Vulnerability
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A security vulnerability exists in the CSV export feature in SilverStripe versions pri...
Code Execution Vulnerability in YzmCMS_v3.6
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A code execution vulnerability exists in YzmCMSv3.6. Allow attackers to exploit the vulnerability to execute script code and obtain...
CVE-2018-2609
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM...
Squiz Matrix Matrix WYSIWYG plugin cross-site scripting vulnerability
Squiz Matrix is an enterprise content management system from Squiz Australia.Matrix WYSIWYG plugins is a WYSIWYG editor plugin used in it. A cross-site scripting vulnerability exists in the Matrix WYSIWYG plugin in Squiz Matrix versions prior to 5.3.6.1 and 5.4.x versions prior to 5.4.1.3. A remo...
