CVE-2017-20229

MAWK 1.3.3-17 and earlier contain a stack-based buffer overflow due to inadequate boundary checks on user-supplied input. An attacker can craft input that overflows the stack and facilitates a return-oriented programming chain to spawn a shell with application privileges. The connected documents ...

Iron Mountain Envision operating system command injection vulnerability

Iron Mountain enVision is a document archiving and management software from Iron Mountain, Inc. An operating system command injection vulnerability exists in versions prior to Iron Mountain enVision 250563, which stems from improper neutralization of a special element that could lead to OS comman...

WordPress plugin Hover Image Button has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...