Real-Time Find and Replace < 4.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site’s administrator into performing an action, like clicking on a link in a comment or email...

The vulnerability of the array_find function in the CUPS printing server, related to reading beyond the buffer memory limit, allows an attacker to access confidential data.

The vulnerability of the arrayfind function in the CUPS printing server is related to incorrect memory boundary checking. Exploiting this vulnerability could allow an attacker to access confidential data...

Update Rollup 3 for System Center 2012 R2 Operations Manager

Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...

PT-2020-8644

Name of the Vulnerable Software and Affected Versions: tcpdump versions 4.9.2 and earlier Description: The issue is related to a heap-based buffer over-read in the EXTRACT 32BITS function, which is called from the rx cache find function. This occurs due to improper sanitization of the serviceId...

PT-2020-7654

Name of the Vulnerable Software and Affected Versions Ex Libris ALEPH 500 versions 18.1 through 20 Description The issue allows remote attackers to inject arbitrary web script or HTML via the find, lib, or sid parameters in the cgi-bin/tag m.cgi endpoint. This enables attackers to perform...

CVE-2014-3719: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

CVE-2014-3718: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...

PT-2020-7655

Name of the Vulnerable Software and Affected Versions Ex Libris ALEPH 500 versions 18.1 through 20 Description The issue concerns multiple SQL injection vulnerabilities in the cgi-bin/review m.cgi component of Ex Libris ALEPH 500. These vulnerabilities allow remote attackers to execute arbitrary...

CVE-2019-10585

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

Integer overflow

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

PT-2020-9089

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130...

CVE-2019-10585: Integer Overflow or Wraparound

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

The vulnerability in the `fs/btrfs/volumes.c` function of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/btrfs/volumes.c function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure due to incorrect processing of finddevice...

stb heap buffer overflow vulnerability (CNVD-2020-04061)

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttfindtable in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

UBUNTU-CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

PT-2020-19185

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to a heap-based buffer over-read in the stbtt find table function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

Description of the security update for Excel 2016: December 10, 2019

None None...

DEBIAN-CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2019-4876

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to an incorrect bounds check in the array find function of the printer spooler, which could lead to a local information disclosure. No additional execution privileges are needed,...

UBUNTU-CVE-2019-18885

fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...