273 matches found
zlib: Out-of-bounds pointer arithmetic in inffast.c
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
zlib: Undefined left shift of negative number
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...
zlib: Out-of-bounds pointer arithmetic in inffast.c
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
zlib: Out-of-bounds pointer arithmetic in inffast.c
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
AlegroCart SQL Injection Vulnerability
AlegroCart is an open source online business solution from the Canadian ALEGROCART team. A SQL injection vulnerability exists in AlegroCart version 1.2.8. Remote attackers can use a variety of methods to exploit the vulnerability to execute arbitrary SQL commands. The methods include:...
AlegroCart Arbitrary Code Execution Vulnerability
AlegroCart is an open source online business solution from the Canadian ALEGROCART team. AlegroCart version 1.2.8 has a remote file inclusion vulnerability in the 'getfile' function of the upload/admin2/controller/reportlogs.php file, which stems from the program failing to detect the 'filepath'...
AZL-44352 CVE-2016-9843 affecting package fltk for versions less than 1.3.8-1
The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...
UBUNTU-CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
UBUNTU-CVE-2016-9842
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...
zlib: Out-of-bounds pointer arithmetic in inffast.c
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
zlib: Out-of-bounds pointer arithmetic in inffast.c
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
zlib denial of service vulnerability (CNVD-2016-13296)
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
zlib denial of service vulnerability (CNVD-2016-13298)
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
zlib Denial of Service Vulnerability
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
WordPress Photo Gallery Blind SQL injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
LifeType 1.2.8 - 'admin.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29050/info LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Pulse CMS Basic - Local File Inclusion Vulnerability
No description provided by source. 'Pulse CMS Basic' Local File Inclusion Vulnerability CVE-2010-4330 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'includes/controller.php' script that allows for arbitrary local fil...
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
The installed version of nginx is 1.1.4 through 1.2.8, 1.3.x, or 1.4.x prior to 1.4.1. It is, therefore, affected by multiple vulnerabilities: - A stack-based buffer overflow in 'ngxhttpparse.c' may allow a remote attacker to execute arbitrary code or trigger a denial of service condition via a...
Mantisbt < 1.2.8 LFI
standard LFI via not properly sanatized variables Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities
This host is running MantisBT and is prone to multiple local file include and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmantismultlfinxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities...