4750 matches found
Enlightenment elevation of privilege vulnerability
Enlightenment is a window manager for the X Window System, which can be used alone or with desktop environments such as GNOME, KDE, and others. A security vulnerability exists in versions of Enlightenment prior to 0.17.6. A local attacker can exploit this vulnerability to gain privileges...
OpenEMR Access Restriction Bypass Vulnerability
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in the interfaces/fax/faxdispatch.php fil...
PT-2018-17653 · Ca · Ca Spectrum
Name of the Vulnerable Software and Affected Versions: CA Spectrum versions prior to 10.01.02.PTF 10.1.239 CA Spectrum version 10.2.x prior to 10.2.3 Description: The issue allows remote attackers to cause a denial of service via unspecified vectors. Recommendations: For CA Spectrum versions prio...
Huawei ALP-AL00B and BLA-AL00B RCS Module Unauthorized Operation Vulnerability
Huawei ALP-AL00B and BLA-AL00B are both smartphone products from Huawei, China.RCS module is one of the converged communication modules. A security vulnerability exists in the RCS module in the Huawei ALP-AL00B before version 8.0.0.129 and the BLA-AL00B before version 8.0.0.129. An attacker can...
CVE-2018-5226
There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...
PT-2018-1899 · Perl +3 · Perl +3
Name of the Vulnerable Software and Affected Versions: Perl versions prior to 5.26.2 Description: The issue is related to a heap-based buffer overflow error in the pack function of the Perl interpreter. This error occurs when handling a large number of elements, leading to a potential overflow of...
UBUNTU-CVE-2018-10060
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...
CVE-2018-9118
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...
glibc: DNS resolver NULL pointer dereference with crafted record type
resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...
tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
AZL-35101 CVE-2018-1000156 affecting package patch for versions less than 2.7.6-9
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...
CVE-2018-1000147
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...
CVE-2017-3967
Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...
Jumio SDK for Android Arbitrary Code Execution Vulnerability
Jumio SDK for Android is a software development kit for building authentication applications using biometrics based on the Android platform. A security vulnerability exists in versions of Jumio SDK for Android prior to 1.5.0. The vulnerability can be exploited to execute arbitrary code via the...
Enhancesoft osTicket Arbitrary Password Reset Vulnerability
Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A security vulnerability exists in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit the vulnerability to reset arbitrary passwords...
Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2018-07903)
Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the /scp/index.php file in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'sor...
rap2hpoutre Laravel Log Viewer Security Bypass Vulnerability
rap2hpoutre Laravel Log Viewer is a log viewer for the Laravel development framework. A security vulnerability exists in rap2hpoutre Laravel Log Viewer prior to version 0.13.0. A remote attacker can exploit this vulnerability to bypass access restrictions...
Kontena server/app/views/static/code.html page cross-site scripting vulnerability
Kontena is a suite of open source microservices platforms capable of running applications as containers. The 'kontena master login --remote' code on the server/app/views/static/code.html page in Kontena versions prior to 1.5.0 indicates a cross-site scripting vulnerability. A remote attacker coul...
Unspecified Vulnerability in inversoft prime-jwt
inversoft prime-jwt is an open source Java 8-based JWT library . A security vulnerability exists in JWTDecoder.decode in versions prior to inversoft prime-jwt 1.3.0 and commit 0d94dcef0133d699f21d217e922564adbb83a227. No details of the vulnerability are provided at this time...
