2195 matches found
MariaDB Server 10.1.x < 10.1.21 Multiple Vulnerabilities
Binary data 9915.prm...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-01022)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...
openWYSIWYG Insert Image 1.4.7 Arbitrary File Upload Vulnerability
openWYSIWYG Insert Image version 1.4.7 suffers from a remote arbitrary unauthenticated file upload vulnerability Exploit Title: openWYSIWYG | Insert Image v1.4.7 / Unauthenticated File Upload Date: 2017-1-15 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home :...
libreoffice: Heap-buffer-overflow in tools::Polygon::Insert
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6633131901714432 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...
PT-2017-2350
Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 2017-01-02 Description The issue is caused by a heap-based buffer overflow related to the tools::Polygon::Insert function. This can lead to an out-of-bounds write. Exploitation of the issue may allow a remote...
Spoofing Via Manifest
borgbackup is vulnerable to spoofing attacks. It does not verify the manifest, allowing an attacker to spoof. To exploit the vulnerability, it requires an attacker to be able to insert files with no additional headers into backups, and have write access to the repository. This vulnerability does...
Apple macOS 10.12.2 iOS 10.2 - _kernelrpc_mach_port_insert_right_trap Kernel Reference Count Leak Use-After-Free
Apple macOS 10.12.2 iOS 10.2 - kernelrpcmachportinsertrighttrap Kernel Reference Count Leak Use-After-Free / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=941 Proofs of Concept: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/40956.zip The...
Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (1)
Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free MS13-037 1 window.onload=functionlocation.reload;; text .float float:left; .zoom zoom:3000%; .border::first-letter...
WordPress Plugin Insert Html Snippet Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in Wordpress plugin Insert Html Snippet version 1.2. The...
WordPress Insert Html Snippet 1.2 Cross Site Request Forgery
------------------------------------------------------------------------ Cross-Site Request Forgery in Insert Html Snippet WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress Insert Html Snippet 1.2 Cross Site Request Forgery Vulnerability
WordPress Insert Html Snippet plugin version 1.2 suffers from a cross site request forgery vulnerability. ------------------------------------------------------------------------ Cross-Site Request Forgery in Insert Html Snippet WordPress Plugin...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Solaris Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Bash subcomponent of the Oracle Solaris component version 10 of the Oracle Sun Systems Products Suite. An...
CVE-2016-3367: Improper Restriction of Operations within the Bounds of a Memory Buffer
StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...
SQL Injection Vulnerability in zabbix
zabbix is an open source enterprise performance monitoring solution. A SQL injection vulnerability exists in the insert method of the profileIdx2 parameter in zabbix's jsrpc. An attacker can log in to the zabbix management system without authorization, and can also directly obtain operational...
Oracle Communications Applications Unspecified Vulnerability in Oracle Communications EAGLE Application Processor Component
Oracle Communications is a suite of communications applications for rapidly delivering and monetizing digital lifestyle services from Oracle Corporation. the Oracle Communications EAGLE Application Processor is one of the platform components that provides Signaling Transmission Points STPs,...
DSA-3621-1 mysql-connector-java - security update
Bulletin has no description...
PT-2016-2023
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.27 PHP versions 5.6.x prior to 5.6.11 Description The issue is related to a use-after-free vulnerability in the spl ptr heap insert function, which can be exploited by remote attackers to execute arbitrary code. This ...
Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02558)
Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the PIA Search Functionality...
Unspecified Vulnerability in Oracle Financial Services Software Oracle FLEXCUBE Direct Banking Component (CNVD-2016-02479)
Oracle Financial Services Software is a set of Oracle's core banking, online banking and property management financial services software, of which Oracle FLEXCUBE Direct Banking is a set of Internet and mobile banking solution components. An unspecified vulnerability exists in the Pre-Login...
