6193 matches found
libcsp library buffer overflow vulnerability (CNVD-2016-10597)
The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspsfprecvfp function in the cspsfp.c file in libcsp library v1.4 and earlier versions, which can be exploited by an...
ESPCMS has a database file download vulnerability
ESSENCE ESPCMS website management system based on LAMP development and construction of the website management system. ESPCMS has a database file download vulnerability. Due to logging into the background and clicking upgrade, the system will automatically backup the database data, the backup file...
libcsp library buffer overflow vulnerability
The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspcanprocessframe in the cspifcan.c file in libcsp library v1.4 and earlier. An attacker can exploit this vulnerability t...
PT-2016-7514 · Libcsp · Libcsp
Name of the Vulnerable Software and Affected Versions: libcsp library version 1.4 and earlier Description: The issue is related to a buffer overflow in the csp can process frame function in csp if can.c. This allows hostile components connected to the canbus to execute arbitrary code by sending a...
Cgiemail Source Code Disclosure Vulnerability
CGIEmail is a WEB-based mail processing system. A source code disclosure vulnerability exists in Cgiemail version 1.6, which allows an attacker to retrieve the source code of a script file e.g., PL, CGI, and BAT from the server by sending a specially crafted request that contains square brackets...
Wordpress simple-image-manipulator plugin remote file download vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. simple-image-manipulator is one of the image manipulator plugin. A remote file download vulnerability exists in Wordpress simple-image-manipulator plugin v1.0, which can be exploited by...
TLS SHA-1 Spoofing Attack Vulnerability
TLS full name Transport Layer Security is a set of protocols used to provide confidentiality and data integrity between two communicating applications. A security vulnerability exists in SHA-1 in TLS version 1.2. This vulnerability can be exploited by an attacker to perform spoofing attacks...
CVE-2016-1000145
Reflected XSS in wordpress plugin pondol-carousel v1.0...
CVE-2016-1000138
Reflected XSS in wordpress plugin indexisto v1.0.5...
CVE-2016-1000135
Reflected XSS in wordpress plugin hdw-tube v1.2...
CVE-2016-1000130
Reflected XSS in wordpress plugin e-search v1.0...
Mobiketa Cross-Site Request Forgery Vulnerability
Mobiketa is a full-featured SMS and language management software. A cross-site request forgery vulnerability exists in index/php in Mobiketa version 1.0, which can be exploited by remote attackers to perform unauthorized operations and gain access to the affected application...
iSQL isql_main.c Buffer Overflow Vulnerability
iSQL is an interpreter of SQL that interprets and executes SQL commands to create small databases. A buffer overflow vulnerability exists in iSQL version 1.0, which can be exploited by an attacker to execute arbitrary code...
Microsoft Windows SMB Server Remote Code Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An authenticated remote code execution vulnerability exists in the SMBv1 server in Microsoft Windows. A remote attacker can exploit this...
Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability
Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. A remote code execution vulnerability exists in Cisco APIC-EM version 1.0. An attacker could...
DEBIAN-CVE-2016-5353
epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability
Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.Packet Data Network Gateway aka PGW is one of the packet data gateways. A security vulnerability exists in the General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 implementation of the Cisco ASR 5000...
CVE-2016-4165
The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...
Adobe Brackets Cross-Site Scripting Vulnerability
Adobe Brackets is the United States Odo than Adobe company's set of open source based on HTML/CSS/JavaScript development and run on the native shell on the integrated development environment . Cross-site scripting vulnerability exists in Adobe Brackets 1.6 and earlier versions for Windows,...