346 matches found
UBUNTU-CVE-2019-14491
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
PT-2019-6435
Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 3.4.7 OpenCV versions 4.x prior to 4.1.1 Description The issue is related to an out of bounds read/write in the HaarEvaluator::OptFeature::calc function in the modules/objdetect/src/cascadedetect.hpp component of the...
kernel security, bug fix, and enhancement update
3.10.0-957.1.3.el7.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigning [email protected] - Update x509.genkey bug 24817676 3.10.0-957.1.3.el7 - x86 Mark Intel Cascade Lake supported Steve Best 1650213 16399...
Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
Spectre and Meltdown fixes for Intel chips announced in March, to be embedded into new CPUs, do not address the newly disclosed Variant 4, sources said. Intel introduced hardware-based safeguards to its new chips to protect against the Spectre and Meltdown flaws that rocked the silicon industry...
Intel Details CPU ‘Virtual Fences’ Fix As Safeguard Against Spectre, Meltdown Flaws
Intel introduced hardware-based protections to its new chips to protect against the Spectre and Meltdown flaws that rocked the silicon industry when the vulnerabilities were made public in early 2018. Spectre and Meltdown, which account for three variants of a side-channel analysis security issue...
cascade-usa.com XSS vulnerability
Open Bug Bounty ID: OBB-522656 Description| Value ---|--- Affected Website:| cascade-usa.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
CVE-2013-0682
Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...
Command injection
The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...
CVE-2013-0681
CVE-2013-0681 affects Cogent Real-Time Systems products (Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub Windows before 6.4.22, DataHub QuickTrend before 7.3.0). The issue is a NULL pointer dereference in the parser when handling malformed data in a formatted text command ...
Cogent OPC DataHub and Cascade DataHub < 7.2 XSS and CRLF Vulnerabilities
OPC DataHub or Cascade DataHub is prone to multiple cross-site scripting XSS and CRLF vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities
This host is installed with OPC DataHub or Cascade DataHub and is prone to cross site scripting and CRLF vulnerabilities. OpenVAS Vulnerability Test $Id: gbcogentcascadenopcdatahubmultvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities...
CVE-2012-0309
Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
DEBIAN-CVE-2009-1960
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...
UBUNTU-CVE-2009-1960
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...
Dokuwiki 2009-02-14 Local File Inclusion
Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload config file $preload =...
Dokuwiki 2009-02-14 - Local File Inclusion
Dokuwiki 2009-02-14 - Local File Inclusion Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload...
Dokuwiki 2009-02-14 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================== Dokuwiki 2009-02-14 Local File Inclusion Vulnerability ====================================================== Author girex CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-...
CVE-2009-1088
The CVE-2009-1088 entry concerns Hannon Hill Cascade Server 5.7 and other versions where remote authenticated users can trigger arbitrary code execution through a crafted XSLT stylesheet using extension elements/functions to invoke Xalan-Java (e.g., xalan://java.lang.Runtime). This is a remote co...
Command Execution in Hannon Hill Cascade Server
Emory University UTS Security Advisory EMORY-2009-01 Topic: Command Execution in Hannon Hill Cascade Server Original release date: March 19, 2009 SUMMARY ======= Hannon Hill's Cascade Server product is vulnerable to a command execution vulnerability. An attacker with access to an unprivileged...