5229 matches found
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-02234)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 58. A remote attacker could exploit the vulnerability to access frames across sources...
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2018-02643)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions prior to Mozilla Firefox 58. An attacker could exploit this vulnerability to cause a denial of service crash...
jQuery Denial of Service Vulnerability
jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A denial of service vulnerability exists in versions of...
AZL-41228 CVE-2015-9251 affecting package ceph for versions less than 18.2.2-1
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02061)
Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...
Zimbra Collaboration Suite Cross-Site Scripting Vulnerability
Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in versions of ZCS prior to 8.8.0 Beta2. A remote attacker can exploit this vulnerability to inject...
UBUNTU-CVE-2016-6810
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation...
CVE-2016-10256
The Symantec ProxySG 6.5 prior to 6.5.10.6, 6.6, and 6.7 prior to 6.7.2.1 management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client...
UBUNTU-CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted web site...
Irssi Buffer Overflow Vulnerability
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A heap buffer overflow vulnerability exists in versions of Irssi prior to 1.0.6 that stems from a computational error. An attacker can exploit this vulnerability to affect the stability of Irssi...
Advantech WebAccess Input Validation Vulnerability
Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An input validation vulnerability exists in versions of...
PT-2017-14611 · Mistune · Mistune
Name of the Vulnerable Software and Affected Versions: Mistune versions prior to 0.8.1 Description: The issue concerns a Cross-Site Scripting XSS vulnerability in the keyify function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML by exploiting the failure to...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37641)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUJobCountHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37640)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackupTargetSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...
Puppet Enterprise console cross-site scripting vulnerability
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. console is one of the console tools. ...
PT-2019-8314 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14 Description: An out of boundary access issue occurred in the Linux kernel, specifically in the drivers/nvme/target/fc.c file. Recommendations: For Linux kernel versions prior to 4.14, update to version 4.14...
Vim Information Disclosure Vulnerability (CNVD-2017-38252)
Vim is a text editor developed from vi. An information disclosure vulnerability exists in Vim prior to 8.0.1263. The vulnerability arises because fileio.c in Vim sets the group ownership of a .swp file to the editor's main group which may differ from the group ownership of the original file. A...
CVE-2017-2702
Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone...
PT-2018-8407 · Mit +4 · Kerberos +4
Name of the Vulnerable Software and Affected Versions: Kerberos versions prior to 1.16.1 Description: An authentication bypass flaw was found in the way krb5's certauth interface handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially us...