110 matches found
PT-2021-4553 · Openexr +4 · Openexr +4
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: The issue is related to an integer overflow leading to a heap-buffer overflow in the DwaCompressor component of OpenEXR. This flaw can be exploited by an attacker to cause a denial of service,...
PT-2020-6481 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: A flaw in the Dwa decompression functionality of OpenEXR's IlmImf library can cause a NULL pointer dereference when processing a crafted input file supplied by an attacker. This could lead to ...
AZL-44829 CVE-2020-11765 affecting package OpenEXR 2.3.0-6
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read...
DEBIAN-CVE-2020-11762
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case...
DEBIAN-CVE-2020-11765
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read...
Security Bulletin: Rational DOORS Web Access is affected Cross-site scripting vulnerability
Summary Rational DOORS Web Access is affected by a cross-site scripting vulnerability. Vulnerability Details CVEID: CVE-2018-1975 DESCRIPTION: IBM DWA is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
CVE-2017-16674
Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent DWA 1.0.5.0 and earlier...
CVE-2017-16674: Undefined Security Weakness
Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent DWA 1.0.5.0 and earlier...
invesco.com XSS vulnerability
Open Bug Bounty ID: OBB-293166 Description| Value ---|--- Affected Website:| invesco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."...
CVE-2010-0918
Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes aka Domino Web Access or DWA before 229.281 for Domino 8.0.2 FP4 have unknown impact and attack vectors...
CVE-2010-0919
The CVE-2010-0919 issue is a stack-based buffer overflow in the Lotus Domino Web Access ActiveX control (dwa8.dll/dwa8w.dll) used by IBM Lotus iNotes. The vulnerability arises when processing a long URL argument, copying it into a fixed-size stack buffer without length checks, which can lead to r...
CVE-2010-0920
Cross-site scripting XSS vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."...
CVE-2010-0921
IBM Lotus iNotes (aka Domino Web Access) prior to 229.281 for Domino 8.0.2 FP4 is affected by a CSRF vulnerability that could allow an attacker to hijack the authentication of unspecified victims due to missing XSS/CSRF Get Filter and Referer Check fixes. Affected component: iNotes/DWA on Domino ...
CVE-2010-0274
Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...
Code injection
Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...
Code injection
Unspecified vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH...
CVE-2010-0274
Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...
CVE-2009-4594
Technical details for CVE-2009-4594 are not publicly available in the provided documents. Monitor for updates; the supplied data does not specify affected products, impact, exploitation, or remediation.