7810 matches found
CVE-2015-5224
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks...
CVE-2015-5224
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks...
CVE-2015-5224
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks...
CVE-2015-5224: Insecure Temporary File
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks...
See my how-to the Apache fuzzing and dig to a value of 1500 knife of vulnerability-vulnerability warning-the black bar safety net
Target In the AFL in the view of the Apache httpd server's crash logs, I found a lot of problems. For example, some crash testing with example in fuzz testing tools internal collapse, but also affect the test program stability. In this article, I will talk to you to explain the test case to crash...
DEBIAN-CVE-2017-12597
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...
OpenCV Denial of Service Vulnerability (CNVD-2017-24173)
OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'FillColorRow8' function in the utils.cpp file in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds...
CVE-2015-3297
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests...
CVE-2015-3297: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests...
PT-2017-3247
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 Description The issue is related to insufficient validation of untrusted input in Blink's mailto: handling, allowing a remote attacker to perform command injection via a crafted HTML page. This is...
CVE-2017-9331
The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter...
PT-2017-18847
Name of the Vulnerable Software and Affected Versions Telaxus EPESI versions 1.8.2 and earlier Description The issue concerns a Stored Cross-site Scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description...
RHEL 6 : libtirpc (RHSA-2017:1268)
An update for libtirpc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CentOS Update for libtirpc CESA-2017:1268 centos6
Check the version of libtirpc SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882721";...
PT-2017-10549
Name of the Vulnerable Software and Affected Versions Config-Model versions prior to 2.102 Description The gen class pod implementation in lib/Config/Model/Utils/GenClassPod.pm has a dangerous "use lib" line. This allows remote attackers to have an unspecified impact via a crafted Debian package...
CVE-2017-0373: Improper Input Validation
The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...
RHEL 7 : libtirpc (RHSA-2017:1263)
An update for libtirpc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Timing Attack
Jetty Utils is vulnerable to timing attacks. The library is vulnerable because it does not compare passwords, message digests and credentials in constant-time. This allows malicious users to use the timing of the request to progressively identify a valid passwords, message digests and credentials...
Privilege Escalation Through Authentication Bypass
keycloak-auth-utils is vulnerable to privilege escalation attacks. The vulnerability is possible because it does not properly perform the token validation in validateGrant. Therefore, attackers can bypass the authentication with invalid tokens and perform unauthorized access to the restricted...
