456 matches found
CVE-2018-18206
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash...
CVE-2018-18206
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash...
PT-2018-3632
Name of the Vulnerable Software and Affected Versions HAProxy versions prior to 1.8.14 Description The issue is related to an out-of-bounds read access in the HPACK decoder of HAProxy, which can be exploited by a remote attacker to cause a denial of service. This is due to a flaw in the hpack val...
Out-Of-Bounds Write
json-patch is affected by an out-of-bounds write vulnerability. This is due to a lack of index checking of the idx parameter in patch.go, which could allow an attacker to cause a denial of service condition...
PT-2018-5518
Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to an out-of-bounds write in the ih264d ref idx reordering function of libavc. This could potentially lead to remote code execution without requiring additional execution...
WordPress dsIDXpress IDX Plugin Cross Site Scripting Vulnerability
WordPress dsIDXpress IDX Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4521
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2014-4521
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2014-4521
The CVE-2014-4521 entry concerns WordPress: dsIDXpress IDX Plugin, vulnerable component is client-assist.php. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML by supplying a crafted action parameter. Affected version appears to be t...
CVE-2014-4521: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
PT-2014-5950
Name of the Vulnerable Software and Affected Versions dsIDXpress IDX plugin versions prior to 2.1.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the action parameter in the...
Dsidxpress < 2.1.1 - XSS
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
SmartCMS (index.php, idx parameter) SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================================================================= o SmartCMS = SQL Injection Vulnerability Software : SmartMS Vendor : http://smartcms.nl/ Author : NoGe Contact :...
CVE-2007-1385: Undefined Security Weakness
chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service crash and heap corruption via a negative or large idx value...
