3321 matches found
ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...
libopenmpt Input Validation Error Vulnerability (CNVD-2020-22391)
libopenmpt is a cross-platform C and C++ based audio library that decodes audio files into raw PCM audio streams. An input validation error vulnerability exists in libopenmpt. No details of the vulnerability are available at this time...
CVE-2019-1010193
hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...
GNU Binutils libiberty Input Validation Error Vulnerability
GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives...
Arbitrary Code Execution
constantinople is vulnerable to Arbitrary Code Execution. The library uses Function to evaluate the code expression, allowing an attacker to attempt a sandbox bypass which can lead to arbitrary code execution...
CVE-2019-14211
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript...
Stack overflow
In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due...
CVE-2018-10986
OX Guard 2.8.0 has CSRF...
CVE-2017-8411
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the POST parameters passed in this request to test if email credentials and hostname sent to the device work...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
PT-2019-5329 · Exiv2 +8 · Exiv2 +8
Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27.2 Description: The issue is related to an uncontrolled memory allocation in the PngChunk::parseChunkContent function of the Exiv2 library, which can be exploited by an attacker to cause a denial of service via a...
CVE-2019-12280
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...
ALPINE-CVE-2018-20843
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing enough to be usable for denial-of-service attacks...
Cross-site Scripting (XSS)
concrete5/concrete5 is vulnerable to cross-site scripting attacks. The library does not sanitize imported SVG files, allowing a malicious user to inject and execute arbitrary web script into a victim's browser...
RUSTSEC-2019-0003 Out of Memory in stream::read_raw_bytes_into()
Affected versions of this crate called Vec::reserve on user-supplied input. This allows an attacker to cause an Out of Memory condition while calling the vulnerable method on untrusted data...
CVE-2018-5798
This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager...
Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers
Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...
CVE-2019-9647
Gila CMS 1.9.1 has XSS...