CVE-2017-9913

XnView Classic for Windows 2.40 is vulnerable to a crafted .fpx file that can cause a denial of service and potentially unspecified impact, linked to the data-from-faulting-address control path in ntdll_77df0000!TpAllocCleanupGroup+. This CVE entry (CVE-2017-9913) is described in the NVD record a...

CVE-2017-9914

CVE-2017-9914 affects XnView Classic for Windows (v2.40). The vulnerability allows remote code execution via a specially crafted .bie file, tied to a Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b. This entry indicates a potentially high-impact result (code executio...

CVE-2017-9914

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b."...

CVE-2017-9910

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code 0xc000041d starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-9901

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."...

Classic Ether Wallet Compromised via Social Engineering

Classic Ether Wallet, an open source wallet for the public, blockchain-based cryptocurrency platform Ethereum Classic ETC was compromised late last week. Developers of the decentralized platform said an attacker managed to hijack the domain for the wallet via social engineering late Thursday...

classic-clocks.co.uk XSS vulnerability

Vulnerable URL: https://www.classic-clocks.co.uk/hermlegallery.asp?clockgroup=1/-///'/"//--...

classicfootballshirts.co.uk XSS vulnerability

Vulnerable URL: https://www.classicfootballshirts.co.uk/catalogsearch/result/?q=1%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CVideo/Src/Onloadstart=confirm1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...

Icinga Cross-Site Scripting Vulnerability

Icinga is a set of enterprise-grade open source monitoring system from the Icinga project, a product between the Nagios Community Edition and Enterprise Edition. A cross-site scripting vulnerability exists in Icinga's Classic-UI with CSV export link and pagination functionality. Remote attackers...

UBUNTU-CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

Cross site scripting

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

CVE-2015-8010

Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi...

DEBIAN-CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

Real Networks NetZip Classic Buffer Overflow

A buffer overflow vulnerability exists in Real Networks Netzip Classic. The vulnerability is due to improper boundary check error while handling ZIP files. A remote attacker can exploit this vulnerability to execute an arbitrary code on the victim's computer...

PT-2017-09: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A cleartext transmission of information vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH100...

PT-2017-10: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...

Messaging Classic - 4.4 Kitkat - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Classic - 4.4 Kitkat published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 25 Update: teeworlds-0.6.4-2.fc25

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

[SECURITY] Fedora 24 Update: teeworlds-0.6.4-2.fc24

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...