135 matches found
CVE-2018-19918
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
PT-2018-3953
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30 Description The issue is related to a heap-based buffer over-read and application crash in the process cu tu index function in dwarf.c. This can be exploited by remote attackers using a crafted binary file, leading to...
Description of the security update for SQL Server 2016 CU: January 6, 2018
None None...
UBUNTU-CVE-2017-13135
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
CVE-2017-14934
processdebuginfo in dwarf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file that contains a negative size value in a CU structure...
CVE-2017-14934
processdebuginfo in dwarf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite loop via a crafted ELF file that contains a negative size value in a CU structure...
Microsoft SQL Server 2016 CU Information Disclosure Vulnerability (KB4019086)
Microsoft SQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KB4019086 - Description of the security update for SQL Server 2016 RTM CU: August 8, 2017
KB4019086 - Description of the security update for SQL Server 2016 RTM CU: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow access to an...
Deseneaza cu Mowgli - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Deseneaza cu Mowgli published at the 'play' market has multiple vulnerabilities...
CVE-2014-7036
The Quest Federal CU Mobile aka com.metova.cuae.questfcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7036
The Quest Federal CU Mobile aka com.metova.cuae.questfcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7036
CVE-2014-7036 affects the Quest Federal CU Mobile Android application (package com.metova.cuae.questfcu), version 1.0.27. The app does not verify X.509 certificates for SSL/TLS connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted ce...
PT-2014-7711
Name of the Vulnerable Software and Affected Versions The Quest Federal CU Mobile application version 1.0.27 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...
CVE-2014-7036: Undefined Security Weakness
The Quest Federal CU Mobile aka com.metova.cuae.questfcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6772
The United Educational CU aka com.metova.cuae.uecu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6772
CVE-2014-6772 concerns the Android app United Educational CU (com.metova.cuae.uecu) version 1.0.27, which does not verify SSL server X.509 certificates. This vulnerability allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The availabl...
CVE-2014-6772
The United Educational CU aka com.metova.cuae.uecu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6772: Undefined Security Weakness
The United Educational CU aka com.metova.cuae.uecu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
HP-UX 9.x/10.x/11.x cu Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1886/info cu is a unix utility that is used for communication between two hosts usually over phone lines. It is typically isntalled setuid root so that it can access communications hardware when executed by a regular user...