3334 matches found
CVE-2018-14613
CVE-2018-14613 affects the Linux kernel up to 4.17.10. It involves an invalid pointer dereference in io_ctl_map_page() when mounting/operating a crafted btrfs image, caused by a lack of block group item validation in fs/btrfs/tree-checker.c (check_leaf_item). The issue yields a local, likely kern...
CVE-2018-14613
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...
Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they should not have access to view (CVE-2016-8987)
Summary IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they should not have access to view. Vulnerability Details CVEID: CVE-2016-8987 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets that they...
How to do an Application Item Restore using Standalone Veeam Agent Backups in a Cloud Connect Repository
Article Applicability This article documents a method for performing Application Item Restore from restore points created by a Standalone Veeam Agent for Microsoft Windows deployment and stored in a Cloud Connect Repository. For Veeam Agent for Microsoft Windows deployments managed by a tenant's...
SITEMAKIN SLAC SQL Injection Vulnerability
SITEMAKIN SLAC Site Login and Access Control is a website login and access control software. A SQL injection vulnerability exists in the 'myitemsearch' parameter of the users.php file in SITEMAKIN SLAC version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
preferredbuildings.com XSS vulnerability
Open Bug Bounty ID: OBB-623068 Description| Value ---|--- Affected Website:| preferredbuildings.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Persistent cross site scripting / Cross site request forgery Date: 2018-05-20 Dork: N/A Exploit Author: borna nematzadeh L0RD Vendor Homepage: https://www.codegrape.com/item/flippy-damnfacts-viral-fun-facts-sharing-script/36...
CVE-2018-9969
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA...
Valve: Unfiltered input allows for XSS in "Playtime Item Grants" fields
Enter "test in any of the 3 fields, save it and reload the page. Impact Stored XSS, could possibly break some internal features too as the stored value is not an integer. The hacker selected the Cross-site Scripting XSS - Stored weakness. This vulnerability type requires contextual information fr...
MGASA-2018-0247 Updated perl packages fix security vulnerability
GwanYeong Kim reported that 'pack' could cause a heap buffer write overflow with a large item count CVE-2018-6913...
CVE-2017-2606
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...
CVE-2017-2606
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...
DEBIAN-CVE-2018-6913
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...
CVE-2018-6913
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...
UBUNTU-CVE-2018-6913
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...
perl -- multiple vulnerabilities
perldelta: CVE-2018-6797: heap-buffer-overflow WRITE of size 1 in Sregatom regcomp.c A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. perl 132227 CVE-2018-6798: Heap-buffer-overflow in Perlbytedumpstring utf8.c Matching a crafted locale...
USN-3601-1 memcached vulnerability
It was discovered that Memcached incorrectly handled reusing certain items. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...
DEBIAN-CVE-2018-1000127
memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:itemfree that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service...
Mail.ru: Race condition на market.games.mail.ru
It was possible to get few game items by replaying the single purchase operation for multiple times during the short amount of time. market.games.mail.ru is not in the bug bounty scope, the bounty was awarded out-of-scope due to real monetary impact...