5087 matches found
UBUNTU-CVE-2019-19047
A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...
CVE-2009-5047
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-4611. Reason: This candidate is a duplicate of CVE-2009-4611. Notes: All CVE users should reference CVE-2009-4611 rather than this candidate. All references and descriptions in this candidate have been removed to prevent...
PT-2019-6517 · Eclipse · Jetty
Name of the Vulnerable Software and Affected Versions: Jetty versions 6.x through 6.1.21 Description: The issue concerns an escape sequence injection vulnerability that can be exploited through two vectors: the "Cookie Dump Servlet" and the HTTP Content-Length header. Specifically, a POST request...
Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2019-42375)
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A cross-site scripting vulnerability exists in the Cookie Dump Servlet in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from a lack of proper validation of client-side...
Intel IGC64.DLL shader functionality DCL_INDEXABLE_TEMP denial-of-service vulnerability
Summary An exploitable memory corruption vulnerability exists in Intel’s IGC64.DLL graphics driver, versions 26.20.100.6709 and 26.20.100.6861. A specially crafted pixel shader can cause an out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this...
Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2019-42378)
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A cross-site scripting vulnerability exists in the JSP Dump and Session Dump Servlets in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from a lack of proper validation ...
HP Printers Multiple Vulnerabilities (HPSBPI03630)
A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Eclipse Jetty Information Disclosure Vulnerability
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . An information disclosure vulnerability exists in Dump Servlet in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from errors such as configuration during operation of a...
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
Code injection
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
CVE-2019-6337
CVE-2019-6337 affects HP Inkjet printers via a maliciously crafted print file that can cause the device to assert and emit a core dump to a local device. Public details in HP’s advisory HPSBPI03630 (HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information) confirm a Buffer Overflo...
CVE-2019-6337: Undefined Security Weakness
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
Design/Logic Flaw
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5045
Dump Servlet information leak in jetty before 6.1.22...
CVE-2009-5046
CVE-2009-5046 affects Jetty (JSP Dump and Session Dump Servlets) with XSS due to improper validation in the JSP Dump and Session Dump Servlets, observed in Jetty versions before 6.1.22. The vulnerability enables cross-site scripting that can steal cookie-based credentials when a page using the af...