142 matches found
Adobe Photoshop CC Remote Information Disclosure Vulnerability
Adobe Photoshop CC is the latest set of image processing and drawing software. A remote information disclosure vulnerability exists in Adobe Photoshop CC, which allows remote attackers to exploit the vulnerability by submitting a special file request and tricking the user into parsing it, which...
Natus Xltek NeuroWorks Buffer Overflow Vulnerability (CNVD-2018-12133)
Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A buffer overflow vulnerability exists in the RequestForPatientInfoEEGfile feature in Natus Xltek NeuroWorks version 8. A remote...
Vaultize Enterprise File Sharing Cross-Site Scripting Vulnerability
Vaultize Enterprise File Sharing is an enterprise file sharing solution from Vaultize Technologies, USA. The solution includes features such as data retention management, versioning, secure data handling, data backup and recovery. A cross-site scripting vulnerability exists in Vaultize Enterprise...
CVE-2018-10206
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request...
CVE-2018-10206
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request...
PT-2018-9752 Ā· Vaultize Ā· Vaultize Enterprise File Sharing
Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered that allows for Stored XSS via the optional message field of a file request. Recommendations: For Vaultize Enterprise File Sharing version 17.05.31, consid...
Monstra CMS Remote Code Execution Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A security vulnerability exists in Monstra CMS version 3.0.4. The vulnerability can be exploited by a remote...
Leptonica pixHtmlViewer prog/htmlviewer.c memory access vulnerability
Leptonica is an open source image processing and image analysis library. A security vulnerability in Leptonica pixHtmlViewer prog/htmlviewer.c allows remote attackers to exploit the vulnerability by submitting a special file request that induces the user to parse it, which can crash the applicati...
UBUNTU-CVE-2018-5712
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities
Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities ''' Ubee EVW3226 modem/router multiple vulnerabilities -------------------------------------------------- Platforms / Firmware confirmed affected: - Ubee EVW3226, 1.0.20 - Product page: http://www.ubeeinteractive.com/products/cable/evw322...
CVE-2016-0867
CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request...
Server side request forgery (ssrf)
CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request...
CVE-2016-0867
CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request...
CVE-2016-0867: Exposure of Sensitive Information to an Unauthorized Actor
CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request...
CVE-2016-1490
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list...
CVE-2016-1490: Exposure of Sensitive Information to an Unauthorized Actor
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list...
SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)
No description provided by source. / Shoutcast = 1.9.4 exploit by crash-x Trys to upload the shellcode to a fixed address and execute it. This exploit was not written bei Simon 'Zodiac' Moser segfault.ch. / include stdio.h include stdlib.h include stdarg.h include string.h include sys/types.h...
XLight FTP Server 1.52 Remote Send File Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9668/info A remote denial of service vulnerability has been reported to exist in the Send File Request functionality of the XLight FTP server. Due to this issue a remote attacker may be able cause the affected server to...
CVE-2014-3913: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file...