557 matches found
Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...
The vulnerability of the fly-fm file manager arises due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to gain unauthorized access to confidential data.
The vulnerability of the fly-fm file manager exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential data...
The vulnerability of the fly-fm file manager lies in the fact that resources are not released after their useful period has ended. This allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...
The vulnerability of the fly-fm file manager, related to errors in saving permissions, allows a violator to gain access to confidential data.
The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the fly-fm file manager is related to an error in data processing through drag-and-drop, which allows a malicious actor to cause a service failure.
The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...
adv-fm-tableau.eservices.virginia.edu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149156 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting adv-fm-tableau.eservices.virginia.edu website and i...
1043.fm Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1065515 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1043.fm website and its...
Cisco Data Center Network Manager getInterfacesBySwitch SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2019-17536
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...
Unrestricted file upload
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4147-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4147-1 advisory. It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup TDLS. A physically...
USN-4115-1: Linux kernel vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this ...
CVE-2019-13387
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php parameter fmcurrentdir allows attackers to steal a cookie or session, or redirect to a phishing website...
CVE-2019-9871
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
Remote code execution
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
CVE-2019-9871
CVE-2019-9871 affects Jector Smart TV FM-K75 devices, where an open ADB port with root permissions enables remote code execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings) with high/critical impact (network, no privileges required) and a base score aroun...
CVE-2019-9871
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
CVE-2019-11456
Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...