8241 matches found
Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. The Qualcomm Wlan Firmware suffers from a buffer error vulnerability that stems from improper validation of P2P IE and NOA attribute lengths, which could result in a buffer overflow...
Qualcomm Wlan Firmware Security Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware, which is a denial of service in FTMR due to a mishandled error that sets a reserved bit in the FTM parameter IE...
CVE-2020-28487
This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...
CVE-2020-28487 Cross-site Scripting (XSS)
This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...
CVE-2020-28487
This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...
PT-2021-11547
Name of the Vulnerable Software and Affected Versions: vis-timeline versions prior to 7.4.4 Description: The issue allows an attacker with the ability to control the items of a Timeline element to inject additional script code into the generated application. This can be done by exploiting the...
CVE-2020-28487: Improper Neutralization of Input During Web Page Generation
This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...
Mozilla Firefox Referrer Policy Unauthorized Access
The vulnerability of the Referrer Policy implementation in Mozilla Firefox’s browser is related to an incorrect request for the element, which can be triggered multiple times. Exploiting this vulnerability may allow a remote attacker to gain unauthorized access to protected information...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
Design/Logic Flaw
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-25325
CVE-2021-25325 affects MISP 2.4.136. It enables cross-site scripting via galaxy cluster element values sent to app/View/GalaxyElements/ajax/index.ctp, where reference types may include javascript: URLs. The issue arises from unsanitized input in galaxy elements, enabling an attacker to execute sc...
CVE-2021-25325: Improper Neutralization of Input During Web Page Generation
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
Adobe InCopy Uncontrolled Search Path Element Vulnerability
Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
Element OS Remote Code Execution Vulnerability
Element OS is a set of Linux operating systems for home theater PC computers. A security vulnerability exists in Element OS versions prior to 1.8P1 and 12.2, which arises from a failure of a networked system or product to properly filter specific elements of externally-entered data during the...
Adobe Illustrator code vulnerability
Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
libucl:ucl_add_string_fuzzer: Crash in ucl_hash_insert
Detailed Report: https://oss-fuzz.com/testcase?key=6482431328780288 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000e4e0891 Crash State: uclhashinsert uclhashinsertobject...