Psensor 'create_response' function directory traversal vulnerability

Psensor is a Linux-based open source visualization software for probing hardware temperature. A directory traversal vulnerability exists in the 'createresponse' function of the server/server.c file in versions of Psensor prior to 1.1.4, which stems from the program's failure to detect whether a...

chromium-browser: Exploit hardening regression in Oilpan

Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2018-2860

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

PT-2018-1370 · Pdfinfojs · Pdfinfojs

Name of the Vulnerable Software and Affected Versions: pdfinfojs versions = 0.3.6 pdfinfojs versions prior to 0.4.1 Description: The issue is related to a lack of neutralization of special elements in input commands for the pdfinfojs module. This can be exploited by a remote attacker to execute...

Google Android has an unspecified vulnerability (CNVD-2018-09702)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MSM8909W is a central processing unit CPU product of Qualcomm. A security vulnerability exists in RIL in versions of Android prior to 2018-04-05. No detailed...

Cross site scripting

In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the default LOCALUPLOADSDIR storage backend...

Mediawiki redirection vulnerability (CNVD-2018-09663)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in Mediawiki versions prior to 1.28.1, prior ...

Ikiwiki Edit Limit Bypass Vulnerability

Ikiwiki is a wiki compiler developed by Joey, a software developer, and other contributors, which supports the conversion of wiki pages into HTML pages for web publishing. A security vulnerability exists in Ikiwiki versions prior to 3.20161229 using git 2.8.0 and earlier. An attacker can exploit...

CVE-2017-9838

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

PYSEC-2018-10

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request...

Brave Browser Denial of Service Vulnerability

Brave Browser is a web browser from Brave Software, USA. A security vulnerability exists in Brave Browser versions prior to 0.13.0, which originates from an unscripted open tab that can be allowed to be closed. An attacker can exploit this vulnerability to cause a denial of service...

Apple Safari Content Forgery Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari is one of the specialized components used for the Safari browser.... A security vulnerability exists in the Safari component of Apple Safari versions prio...

ZOHO ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL architecture based on IT service management software ITSM. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management a...

bui select component cross-site scripting vulnerability

bui is a front-end framework based on JQuery. select component is one of the search component. A cross-site scripting vulnerability exists in the select component in bui 2018-03-13 and prior versions, which stems from a program performing an escape operation on escaped text. A remote attacker can...

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in /ajax.php/form/help-topic in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the he...

ClamAV Denial of Service Vulnerability (CNVD-2018-07714)

ClamAV Clam AntiVirus is a free and open source antivirus program developed by the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. clamscan is one of the command line antivirus scanners. A security vulnerability exists in clamscan in versions pri...

IdentityServer Cross-Site Scripting Vulnerability

IdentityServer is an open source OAuth framework for ASP.NET Core. A cross-site scripting vulnerability exists in IdentityServer versions 4 1.x prior to 1.5.3 and 2.x prior to 2.1.3, which stems from the program's failure to encode a redirect URL on the Authorization Response page.A remote attack...

SecurEnvoy SecurMail Authentication and Authorization Vulnerabilities

SecurEnvoy SecurMail is an email application from SecurEnvoy USA. A security vulnerability exists in SecurEnvoy SecurMail versions prior to 9.2.501. A remote attacker can exploit the vulnerability to spoof the sender address and alter arbitrary email messages and attachments...

NetIQ iManager Authentication Vulnerability

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.0.3 that originates when the program sends an SSL private key from a Java application to...

Memcached 'item_free()' function integer overflow vulnerability

Memcached is the American software developer Brad Fitzpatrick Brad Fitzpatrick developed a set of high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to...