6982 matches found
The vulnerability of the Internal Port component of the TP-Link M7350 microprogramming system’s route blocker lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary commands.
The vulnerability of the Internal Port component of the TP-Link M7350 microprogramming system controller exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Mozilla: Buffer overflow in plain text serializer
The plain text serializer used a fixed-size array for the number of elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
The vulnerability of the D-Link DBA-1510P network device’s microprogramming software lies in the lack of measures taken to neutralize special elements, allowing a hacker to execute arbitrary commands.
The vulnerability of the microprogrammed network device D-Link DBA-1510P is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Color Enhancer browser extension in Google Chrome allows a hacker to modify HTML pages.
The vulnerability of the Color Enhancer browser extension of Google Chrome is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow a malicious actor to modify HTML pages remotely...
Mozilla: Buffer overflow in plain text serializer
The plain text serializer used a fixed-size array for the number of elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor license manager allows a violator to trigger a service failure.
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor management system is related to the possibility of deleting elements from the lmadmin service. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2019-11935
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer overflow issue can occur in the wlan module of Qualcomm Snapdragon if the length of supported rates or extended rates elements exceeds the maximum rate set lengt...
CVE-2019-6187: Improper Neutralization of Formula Elements in a CSV File
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV...
CVE-2011-2334: Use After Free
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections...
CVE-2019-18855
A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...
CVE-2019-18855
A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...
Denial of service
A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...
PT-2019-15703 · Safe-Svg · Safe-Svg
Name of the Vulnerable Software and Affected Versions: safe-svg plugin versions prior to 1.9.5 Description: A Denial Of Service issue exists, related to potentially unwanted elements or attributes. Recommendations: For versions prior to 1.9.5, update to version 1.9.5 or later to resolve the issue...
CVE-2019-18855: Undefined Security Weakness
A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...
Emerson Dl Improper Neutralization of Special Elements used in a Command ('Command Injection')
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack. File data ot500187.nasl...
kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c
A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation...
CVE-2019-8769
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...
UBUNTU-CVE-2019-8769
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...