19003 matches found
K71059632: PHP vulnerability CVE-2015-8616
Security Advisory Description Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the...
PT-2023-35984 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5SM delete, H5O msg write real, and H5O msg write. Recommendations: At th...
CVE-2023-23467
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
CVE-2023-23460
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...
CVE-2023-23463
Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...
CVE-2023-23467
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
CVE-2023-23465
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...
Authentication flaw
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...
Design/Logic Flaw
Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...
Cross site scripting
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
Design/Logic Flaw
Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...
SUSE CVE-2006-1728
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method...
SUSE CVE-2006-2453
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...
SUSE CVE-2006-3636
Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SUSE CVE-2006-5616
Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors...
SUSE CVE-2006-5706
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass openbasedir restrictions and perform unspecified actions via unspecified vectors involving the 1 chdir and 2 tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494...
SUSE CVE-2006-7221
Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the 1 name and 2 dname entry attributes...
SUSE CVE-2007-0204
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.9.2-rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...