Lucene search
+L

32 matches found

Cvelist
Cvelist
added 2019/10/17 10:49 a.m.31 views

CVE-2019-17667

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

5.6AI score0.00531EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2019/10/17 12:00 a.m.9 views

PT-2019-15246

Name of the Vulnerable Software and Affected Versions Comtech H8 Heights Remote Gateway version 2.5.1 Description The issue allows for XSS and HTML injection attacks through the SiteName field. Recommendations For Comtech H8 Heights Remote Gateway version 2.5.1, avoid using the SiteName field unt...

5.4CVSS5.5AI score0.00531EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2019/09/12 12:17 p.m.12 views

poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS5.9AI score0.02094EPSS
SaveExploits1References4
OSV
OSV
added 2019/05/23 12:00 a.m.8 views

UBUNTU-CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS7.5AI score0.02094EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2018/05/22 1:04 a.m.12 views

search.clevelandheightscourt.com XSS vulnerability

Open Bug Bounty ID: OBB-619870 Description| Value ---|--- Affected Website:| search.clevelandheightscourt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

SaveExploits0
OSV
OSV
added 2017/11/30 9:29 p.m.7 views

UBUNTU-CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.8AI score0.01827EPSS
SaveExploits0References3
OSV
OSV
added 2017/11/30 9:29 p.m.6 views

DEBIAN-CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

6.5CVSS6.7AI score0.01827EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2017/10/26 7:28 a.m.22 views

marine-heights.co.il XSS vulnerability

Open Bug Bounty ID: OBB-369416 Description| Value ---|--- Affected Website:| marine-heights.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/09/03 3:15 p.m.10 views

store.sevierheights.org XSS vulnerability

Vulnerable URL: http://store.sevierheights.org/sermon-series/?changeview=grid=0=1?productsortselect=xss%22%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E&%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.12.2017 Vulnerability type:| XSS...

6.3AI score
SaveExploits0
Veracode
Veracode
added 2017/02/03 8:03 a.m.32 views

Denial Of Service (DoS)

FFMpeg is vulnerable to denial of service DoS attacks and possibly other attacks. This is because gifdec.c doesn't correctly compute image heights allowing attackers to cause out-of-bounds access errors though GIF data...

7.5CVSS8.3AI score0.03058EPSS
SaveExploits0References6Affected Software1
Openbugbounty
Openbugbounty
added 2016/12/30 10:16 a.m.13 views

store.sevierheights.org XSS vulnerability

Vulnerable URL: http://store.sevierheights.org/sermon-series/?changeview=grid=0=1?productsortselect=xss%22%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E&%22 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:35 GMT...

6.3AI score
SaveExploits0
NVD
NVD
added 2014/11/05 11:55 a.m.23 views

CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted GIF data...

7.5CVSS7.2AI score0.03058EPSS
SaveExploits0References4
Rows per page
Query Builder