5240 matches found
CVE-2018-7432
Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of service via a crafted HTTP request...
Google Chrome Blink Information Disclosure Vulnerability (CNVD-2018-24370)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 70.0.3538.67. The vulnerability can be exploited by ...
CVE-2018-12375
Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 62...
CVE-2018-17897
LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code execution...
GHSA-GV5F-CJW9-5VXG Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request...
Pippo Remote Code Execution Vulnerability
Pippo is a Java-based Web framework . A remote code execution vulnerability exists in Pippo 1.11.0 and earlier versions, which stems from the XstreamEngine component failing to use the defense mechanisms available to XStream to limit anti-grouping, and can be exploited by a remote attacker to...
UBUNTU-CVE-2018-0505
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock...
Vanilla Cross-Site Scripting Vulnerability
Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla versions prior to 2.6.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the email field in the basic information...
ZTE MF65 and ZTE MF65M1 Cross-Site Scripting Vulnerability
The ZTE MF65 and ZTE MF65M1 are both wireless Internet access card products from ZTE Corporation ZTE of China. A cross-site scripting vulnerability exists in the ZTE MF65 version prior to V1.0.0B05 and the ZTE MF65M1 version prior to V1.0.0B02, which stems from the program failing to properly...
CVE-2018-14824
Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information...
Vectra Cognito Brain and Sensor Management Console Privilege Vulnerability
Vectra Cognito Brain and Sensor is a cyber threat sensing system from Vectra Networks, USA. The system supports functions such as cyber attack detection and cyber threat search. An elevation of privilege vulnerability exists in the management console in Vectra Cognito Brain and Sensor versions...
CVE-2018-6505
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads...
CVE-2018-15546
Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...
Apple iOS and tvOS Kernel Information Disclosure Vulnerability
Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. tvOS is a kernel component. A security vulnerability exists in the Kernel component of Apple iOS before 12 and tvOS before 12. An attacker c...
Apple iOS CoreMedia Component Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, of which CoreMedia is one of the media core components. A security vulnerability exists in the CoreMedia component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an application to obtain informati...
exceljs cross-site scripting vulnerability
exceljs is a software package for reading, manipulating and writing spreadsheet data and styles. A cross-site scripting vulnerability exists in versions of exceljs prior to 1.6. A remote attacker can exploit this vulnerability to execute JavaScript code embedded in an XLS worksheet with the help ...
Google Chrome URL Spoofing Vulnerability (CNVD-2018-22398)
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the full-screen mode in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to forge URLs...
Google Chrome Skia heap buffer overflow vulnerability (CNVD-2018-22399)
Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A heap buffer overflow vulnerability exists in Skia in versions prior to Google Chrome 63.0.3239.84. A remote...
Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54476)
Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...