Input validation

SAP BusinessObjects, versions 4.2 and 4.3, Visual Difference allows an attacker to upload any file including script files without proper file format validation...

CVE-2019-0259

SAP BusinessObjects, versions 4.2 and 4.3, Visual Difference allows an attacker to upload any file including script files without proper file format validation...

Foxit Reader and Foxit PhantomPDF for Windows Remote Code Execution Vulnerability (CNVD-2018-21826)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A vulnerability exists in the handling of JSON objects in Foxit Reader 9.2.0.9297 and earlier versions and Foxit PhantomPDF...

SAP Internet Graphics Server Arbitrary File Upload Vulnerability

SAP Internet Graphics Server IGS is a graphics server from SAP, Germany. The product is capable of generating graphs or charts in different areas. A security vulnerability exists in SAP IGS that stems from the program's failure to properly validate file formats. An attacker could exploit the...

CVE-2018-2420

SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file including script files without proper file format validation...

CVE-2018-2420: Unrestricted Upload of File with Dangerous Type

SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file including script files without proper file format validation...

SAP Disclosure Management File Upload Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1, which stems...

CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation...

CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation...

Input validation

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation...

CVE-2018-0850

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability"...

SUSE-SU-2017:0103-1 Security update for rrdtool

This update for rrdtool provides the following fixes: - CVE-2013-2131: Enhance imginfo format validation checks to prevent crashes. bsc828003 - Add rrdtool-cached sub-package to SLE 12-SP1. bsc967671...

PHP < 5.2.14 / 5.3.x < 5.3.3 Multiple Vulnerabilities

Binary data 5616.prm...

PHP < 5.3.3 / 5.2.14 Multiple Vulnerabilities

Binary data 801070.prm...

PHP Melody 1.5.3 Remote File Upload Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== PHP Melody 1.5.3 Remote File Upload Injection Vulnerability =========================================================== --------------------------------------------------- PHP...

foss10-upload.txt

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version eNYe-Sec - www.enye-sec.org Upload images is only allowed to the admin but the process to upload has 3 steps with 3 pages. only the first page check the user permissions. STEPS:...

FOSS Gallery Admin 1.0 - Arbitrary File Upload

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version eNYe-Sec - www.enye-sec.org Upload images is only allowed to the admin but the process to upload has 3 steps with 3 pages. only the first page check the user permissions. STEPS:...

CVE-2008-1944

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...