3551 matches found
WebKit - TypedArray.fill Memory Corruption
WebKit - TypedArray.fill Memory Corruption length; unsigned begin = argumentClampedIndexFromStartOrEndexec, 1, length; unsigned end = argumentClampedIndexFromStartOrEndexec, 2, length, length; if end thisValue; if !thisObject-setRangeToValueexec, begin, end, valueToInsert return...
Squid Code Injection Vulnerability
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A code injection vulnerability exists in the clientside.cc file in Squid versions prior to 3.5.1...
UBUNTU-CVE-2016-4553
clientside.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request...
Absolute RC Player - Exported components, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Absolute RC Player published at the 'play' market has multiple vulnerabilities...
Absolute Bingo - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Absolute Bingo published at the 'play' market has multiple vulnerabilities...
POMELO-absolute filters - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application POMELO-absolute filters published at the 'play' market has multiple vulnerabilities...
ABB Panel Builder 800 DLL Handling Vulnerability
ABB Panel Builder 800 is a Web-based HMI Human Machine Interface system. ABB Panel Builder fails to properly handle DLL files, allowing an attacker to inject and execute arbitrary code using a DLL with an unspecified absolute path...
Microsoft Edge GetLineBoxForReuse Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how Microsoft Edge...
USN-2906-1 cpio vulnerabilities
Alexander Cherepanov discovered that GNU cpio incorrectly handled symbolic links when used with the --no-absolute-filenames option. If a user or automated system were tricked into extracting a specially-crafted cpio archive, a remote attacker could possibly use this issue to write arbitrary files...
CVE-2015-8794
Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...
Path traversal
Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...
UBUNTU-CVE-2015-8794
Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...
CVE-2015-8794
Roundcube Webmail contains an absolute path traversal vulnerability in program/steps/addressbook/photo.inc, affecting Roundcube before 1.0.6 and 1.1.x before 1.1.2. A remote authenticated user can read arbitrary files by supplying a full pathname in the _alt parameter during contact photo handlin...
FreeBSD : libarchive -- multiple vulnerabilities (7c63775e-be31-11e5-b5fe-002590263bf5)
MITRE reports : Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper...
CVE-2015-4703
Absolute path traversal vulnerability in mysqldumpdownload.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter...
CVE-2015-4703
CVE-2015-4703 describes an absolute path traversal in the WordPress Rename plugin (version 1.0) for WordPress. The vulnerability resides in mysqldump_download.php, where an attacker can read arbitrary files by supplying a full pathname in the dumpfname parameter. This affects the plugin as instal...
CVE-2015-2875
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi...
CVE-2015-2875
CVE-2015-2875 describes an absolute path traversal in Seagate/LaCie wireless storage firmware prior to 3.4.1.105. A remote attacker with wireless access could read arbitrary files by supplying a full pathname in a download request during a Wi‑Fi session. Affected devices include: Seagate GoFlex S...
CVE-2015-7250
Affected devices: ZTE ZXHN H108N R1A and ZXV10 W300 routers. Vulnerability: CVE-2015-7250 — absolute path traversal in the webproc CGI module (cgi-bin/webproc) allows remote attackers to read arbitrary files via an unvalidated full pathname supplied to the getpage parameter. Root cause: unrestric...
