minidjvu denial of service vulnerability (CNVD-2017-25770)

minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the mdjvubitmapgetboundingbox function in base/4bitmap.c in...

Cross-site scripting vulnerability in OurPHP search box

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A cross-site scripting vulnerability exists in the search box of OurPHP version 1.7.3, due to the failure of the system's search box to strictly filter parameters...

CVE-2017-9493

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

Code injection

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

CVE-2017-9493

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

PT-2017-18963

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Description The issue allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same...

GNOME librsvg 'rsvg-filter.c' denial of service vulnerability

GNOME librsvg is an open source SVG graphics development library for the GNOME project. A security vulnerability exists in the 'boxblurline' function of the rsvg-filter.c file in GNOME librsvg version 2.40.17. An attacker can exploit the vulnerability to cause a denial of service condition...

DEBIAN-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

UBUNTU-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

PT-2017-3955

Name of the Vulnerable Software and Affected Versions librsvg version 2.40.17 Description The issue is related to the implementation of the box blur line function in the librsvg library, which is used for rendering vector graphics. It is caused by errors when performing division operations,...

Shenzhen Cloud Box Technology Co., Ltd. cloud platform exists s2-045 command execution vulnerability

Cloudbox is a private cloud storage platform for enterprise document aggregation, distribution monitoring and collaboration based on mobile networks. Shenzhen Cloud Box Technology Co., Ltd. cloud platform using Apache as the framework, the framework exists s2-045 command execution vulnerability...

losangelesboxoffice.com XSS vulnerability

Vulnerable URL: https://www.losangelesboxoffice.com/tickets.php?/BET-Experience-feat.-Bryson-Tiller,-Jhene-Aiko,-Keyshia-Cole/Staples-Center-CA/=1"...

Authorization

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star aka Swisscom Internet-Box devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure...

CVE-2016-10042

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star aka Swisscom Internet-Box devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure...

Swisscom Internet-Box Authentication Bypass Vulnerability

Swisscom Internet-Box is a router from Arcadyan. An authentication bypass vulnerability exists in the web interface of the Arcadyan SLT-00 Star also known as Swisscom Internet-Box, which can be exploited by an attacker to cause a denial of service and information disclosure through unauthorized...

CVE-2016-10042

The Arcadyan SLT-00 Star* (Swisscom Internet-Box) Web UI contains an authorization bypass (CVE-2016-10042) that allows unauthenticated HTTP requests to reconfigure the static routing table, enabling denial of service and information disclosure. Affected: Arcadyan SLT-00 Star* devices prior to R7....

CVE-2017-9948: Improper Restriction of Operations within the Bounds of a Memory Buffer

A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box...

XSS Vulnerability in NETGEAR FS726Tv2 NETGEAR Backend

The FS726T is a classic smart switch from Netgear. An XSS vulnerability exists in the NETGEAR FS726Tv2 NETGEAR backend. An attacker can exploit the vulnerability to pop up a message in the login box for modification...

SDCMS Search Box SQL Injection Vulnerability

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...

box-designs.com XSS vulnerability

Open Bug Bounty ID: OBB-250232 Description| Value ---|--- Affected Website:| box-designs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...