CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

Apple iOS and tvOS Kernel Information Disclosure Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. tvOS is a kernel component. A security vulnerability exists in the Kernel component of Apple iOS before 12 and tvOS before 12. An attacker c...

Apple iOS CoreMedia Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, of which CoreMedia is one of the media core components. A security vulnerability exists in the CoreMedia component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an application to obtain informati...

exceljs cross-site scripting vulnerability

exceljs is a software package for reading, manipulating and writing spreadsheet data and styles. A cross-site scripting vulnerability exists in versions of exceljs prior to 1.6. A remote attacker can exploit this vulnerability to execute JavaScript code embedded in an XLS worksheet with the help ...

Google Chrome URL Spoofing Vulnerability (CNVD-2018-22398)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the full-screen mode in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to forge URLs...

Google Chrome Skia heap buffer overflow vulnerability (CNVD-2018-22399)

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A heap buffer overflow vulnerability exists in Skia in versions prior to Google Chrome 63.0.3239.84. A remote...

Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54476)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

CVE-2018-16147

The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting...

Mayan EDMS Cross-Site Scripting Vulnerability

Mayan EDMS is a document management system developed by software developer Roberto Rosario. The system supports electronic signatures, version control, optical character recognition, etc. Tags app is one of the tag management applications. A cross-site scripting vulnerability exists in the Tags a...

ThinkPHP SQL Injection Vulnerability (CNVD-2019-17159)

ThinkPHP is an open source, lightweight PHP-based web application development framework. A SQL injection vulnerability exists in ThinkPHP versions prior to 5.1.23. The vulnerability stems from the program not correctly filtering the key value of an array, which can be exploited by a remote attack...

CVE-2018-3787

Path traversal in simplehttpserver v0.2.1 allows listing any file on the server...

PT-2018-10194 · Postgresql +2 · Postgresql-Jdbc +2

Name of the Vulnerable Software and Affected Versions: postgresql-jdbc versions prior to 42.2.5 Description: A weakness was found that could allow a man-in-the-middle attacker to masquerade as a trusted server. This occurs when an SSL Factory is provided without a host name verifier, allowing an...

CVE-2018-12810

Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote code execution...

ALPINE-CVE-2018-15859

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...

CVE-2018-10919

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are...

Pyro Arbitrary File Overwrite Vulnerability

pyro is a distributed object technology system written in the Python language. An arbitrary file overwrite vulnerability exists in pyro versions prior to 3.15, which stems from a program that does not securely handle pid files in a temporary directory and opens the pid file as root. The...

F5 BIG-IP APM Client Privilege Vulnerability

F5 BIG-IP APM client is the client software in a suite of access and security solutions from F5 USA. The software focuses on providing unified access to business-critical applications and networks. A security vulnerability exists in the Windows Logon Integration feature in versions of the F5 BIG-...

UBUNTU-CVE-2018-10919

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are...

CVE-2018-14850

Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image...

PT-2018-12926 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs versions prior to 0.12 Description: The issue allows remote attackers to redirect users to arbitrary websites, potentially leading to phishing attacks. This is achieved via an initial / substring in the redirect to parameter. The...