PT-2018-13676

Name of the Vulnerable Software and Affected Versions Gxlcms version 1.0 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the PATH INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php, allowing for the injection of...

PT-2018-2800

Name of the Vulnerable Software and Affected Versions keepalived versions prior to 2.0.7 Description The issue is related to a heap-based buffer overflow when parsing HTTP status codes, potentially resulting in a denial of service DoS or other unspecified impacts. This occurs because the extract...

CVE-2018-16376

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2encodepacket in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

High severity vulnerability that affects espeak-ruby

Withdrawn, accidental duplicate publish. The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or byteswav method in lib/espeak/speech.rb...

Buffer overflow

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivtransferdata: % highlight c % ifoutlen + recvlen - 2 maxout fprintfstderr, "Output buffer to small, wanted to write %lu, max was %lu.", outlen +...

CVE-2018-14779

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function "ykpivtransferdata": % highlight c % ifoutlen + recvlen - 2 maxout fprintfstderr, "Output buffer to small, wanted to write %lu, max was %lu.", outlen +...

CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function "ykpivfetchobject": % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

Raptor WAF v0.5 - Web Application Firewall using DFA

Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal. to run: $ git clone https://github.com/CoolerVoid/raptorwaf $ cd raptorwaf; make; bin/raptor Note: Don't execute with "cd bin; ./raptor" use full path "bin/raptor" look detail...

CVE-2018-14780: Out-of-bounds Read

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

CVE-2018-14779: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivtransferdata: % highlight c % ifoutlen + recvlen - 2 maxout fprintfstderr, "Output buffer to small, wanted to write %lu, max was %lu.", outlen +...

PT-2018-12719

Name of the Vulnerable Software and Affected Versions Yubico-Piv version 1.5.0 Description An out-of-bounds read issue was discovered in the Yubico-Piv smartcard driver. The issue arises from a memmove operation in the ykpiv fetch object function, located in the lib/ykpiv.c file, where the length...

PT-2018-12717

Name of the Vulnerable Software and Affected Versions Yubico-Piv version 1.5.0 Description A buffer overflow issue was discovered in the Yubico-Piv smartcard driver. The issue arises from the ykpiv transfer data function in the lib/ykpiv.c file, where the code checks if the output buffer is too...

PT-2018-2465

Name of the Vulnerable Software and Affected Versions Open vSwitch OvS versions 2.7.x through 2.7.6 Description An issue was discovered in Open vSwitch OvS, affecting the parse group prop ntr selection method function in lib/ofp-util.c. When decoding a group mod, it validates the group type and...

PT-2018-2704

Name of the Vulnerable Software and Affected Versions Open vSwitch OvS versions 2.7.x through 2.7.6 Description A buffer over-read issue exists in the decode bundle function inside lib/ofp-actions.c during BUNDLE action decoding. This issue can be exploited by a remote attacker to cause a denial ...

CVE-2018-14849: Improper Neutralization of Input During Web Page Generation

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...

CVE-2018-5953

The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...

CVE-2014-0243

CheckMK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/checkmkagent/job...

CVE-2018-14402

axmldec 1.2.0 has an out-of-bounds write in the jitana::axmlparser::parsestartnamespace function in lib/jitana/util/axmlparser.cpp...

CVE-2018-14402

axmldec 1.2.0 has an out-of-bounds write in the jitana::axmlparser::parsestartnamespace function in lib/jitana/util/axmlparser.cpp...

CVE-2018-14402

CVE-2018-14402 affects axmldec 1.2.0, with an out-of-bounds write in jitana::axml_parser::parse_start_namespace (lib/jitana/util/axml_parser.cpp). Multiple sources (NVD, OSV, CVE records) confirm the flaw. The Connected documents do not provide remediation steps or explicit exploit details. No ve...