4 matches found
CrushFTP < 10.8.5 / 11.x < 11.3.4_23 Race Condition
CrushFTP versions prior to 10.8.5 and 11.x versions prior to 11.3.423 are vulnerable to a race condition that could allow an unauthenticated remote attacker to access unauthorized endpoints through a specially crafted request. This issue is due to improper handling of concurrent requests. An...
CVE-2025-36632
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege...
UBUNTU-CVE-2018-12606
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a persistent XSS issue due to a lack of output encoding affecting a specific markdown feature...
Buffer overflow
Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...