PT-2020-18487

Name of the Vulnerable Software and Affected Versions PHPGurukul Hostel Management System version 2.0 Description The issue allows SQL injection via the id parameter in the "full-profile.php" file. This could potentially be exploited to extract or modify sensitive data. Recommendations For...

uftpd Buffer Overflow Vulnerability

uftpd is a Linux-based FTP/TFTP file transfer server. A buffer overflow vulnerability exists in the 'handlePORT' function of the ftpcmd.c file in uftpd versions prior to 2.11. The vulnerability stems from a network system or product performing operations in memory without properly validating data...

OpenLDAP Integer Overflow Vulnerability

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States. A numeric error vulnerability exists in OpenLDAP version 2.4. The vulnerability arises from a network system or product not properly calculating or...

Netwide Assembler Buffer Overflow Vulnerability (CNVD-2020-02979)

Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A buffer overflow vulnerability exists in the expr function of the asm/eval.c file in version 2.14.02 of Netwide Assembler NASM. The vulnerability stems from a networked system ...

stb_image.h Assertion Failure Vulnerability

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. stbimage.h is an image library. A security vulnerability exists in stbimage.h version 2.23 used in libsixel and other products. No details of the vulnerability are provided...

Apple Shortcuts for iOS Input Validation Error Vulnerability

Apple Shortcuts for iOS is a set of shortcut applications from Apple USA based on the iOS platform. A security vulnerability exists in the handling of directory paths in versions of Apple Shortcuts for iOS prior to 2.1.3. A local attacker can exploit the vulnerability to view sensitive user...

D-Link DIR-601 Cross-Site Request Forgery Vulnerability

The D-Link DIR-601 B1 is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-601 B1 version 2.00NA. The vulnerability stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacker...

CVE-2019-6011

Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Linux kernel denial of service vulnerability (CNVD-2020-22685)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in version 2.6 of Linux kernel prior to 2.6.23. An attacker could exploit this vulnerability to cause a denial of service...

PT-2019-15975 · Tautulli · Tautulli

Name of the Vulnerable Software and Affected Versions: Tautulli version 2.1.9 Description: The issue allows an attacker to shut down a remote media server due to a CSRF vulnerability in the "/shutdown" API endpoint. Additionally, anonymous access can be achieved in applications lacking a user log...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

PYSEC-2019-154

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

Aviatrix VPN Client Authentication Vulnerability

Aviatrix VPN Client is a VPN Virtual Private Network client application that provides SAML authentication. A security vulnerability exists in the AVPNCRP service in Aviatrix VPN Client version 2.2.10 and earlier. An attacker can exploit this vulnerability to execute arbitrary code and gain elevat...

Unspecified Vulnerability in IBM Planning Analytics

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in My Account Portal in IBM Planning Analytics version 2.0. An...

CVE-2019-4098

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158020...

CVE-2019-4465

IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774...

patch: do_ed_script in pch.c does not block strings beginning with a ! character

A flaw was found in GNU patch through version 2.7.6. Strings beginning with a exclamation mark are not blocked by default. When ed receives an exclamation mark-prefixed command line argument, the argument is executed as a shell command. The highest threat from this vulnerability is to data...

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

HTTP/2: flood using SETTINGS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...