7812 matches found
CVE-2019-14853
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...
The vulnerability of the jp2image.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.
The vulnerability of the jp2image.cpp component in the Exiv2 metadata management library is related to incorrect error handling. Exploiting this vulnerability may allow a malicious actor to trigger a service failure SIGABRT by calling the Safe::add function remotely...
CVE-2019-8157
A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization...
Cross site scripting
A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization...
CVE-2019-8157
Magento 2.2.x before 2.2.10 and 2.3.x before 2.3.3 or 2.3.2-p1 are affected by a stored XSS vulnerability. An authenticated user can manipulate a downloadable link, triggering error handling that accesses unsanitized user input. This leads to stored cross-site scripting and potential data exposur...
CVE-2019-8157
A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization...
evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()
The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...
The vulnerability of the __blk_drain_queue() function in the block/blk-core.c file of the Linux operating system’s kernel allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.
The vulnerability of the blkdrainqueue function in the block/blk-core.c file of the Linux operating system’s kernel is related to the use of this function after error handling. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protecte...
Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo
CVE-2019-14287 A script to check for the sudo security bypass...
CVE-2019-14853
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...
ImageMagick memory misreference vulnerability (CNVD-2019-41003)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in DestroyStringInfo in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-55. The vulnerability stems from the...
The vulnerability of the dvd+rw-tools utility in the Astra Linux operating system, related to error handling, allows a intruder to cause a service failure.
The vulnerability of the dvd+rw-tools utility in the Astra Linux operating system is related to incorrect termination of writing operations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
MariaDB 10.0.0 < 10.0.8 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.8 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and...
.NET Core SDK Multiple Vulnerabilities (Sep 2019)
ASP.NET Core SDK is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:.netcoresdk";...
Active Directory Federation Services XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize certain error messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected ADFS server. The attacker who...
Nextcloud: XSS in desktop client via invalid server address on login form
Team! I have found this vulnerability that in my time would be called "cross zone" but at the moment I don't know. The problem is found in the latest version of "nextcloud.exe" for your windows version. The problem occurs with the initial screen where you ask to connect to a website. Apparently...
QEMU Denial Of Service
include include include include include include include include include include include include include include include include include define diex do \ perrorx; \ exitEXITFAILURE; \ while0; // Constans define SRCADDR "10.0.2.15" define DSTADDR "10.0.2.2" define INTERFACE "ens3" define ETHHDRLEN ...
CVE-2018-20989
An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic...