10335 matches found
CVE-2018-11897
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit...
RUSTSEC-2018-0006 Uncontrolled recursion leads to abort in deserialization
Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth. Note: clap 2.33 is not...
CVE-2018-17077
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...
CVE-2018-17077
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...
Cross site scripting
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...
CVE-2018-17077
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...
PT-2018-13882
Name of the Vulnerable Software and Affected Versions yiqicms versions prior to 2016-11-20 Description The issue is related to stored XSS in the comment.php file, where a length limit can be bypassed, allowing for potential exploitation. Recommendations For versions prior to 2016-11-20, consider...
CVE-2018-17077: Improper Neutralization of Input During Web Page Generation
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...
CVE-2018-16286: Improper Authentication
LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...
CVE-2018-17012
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for hostsinfo setblockflag uplimit...
CVE-2018-16703
A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help an attacker to perform login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-si...
Philips e-Alert Information Disclosure Vulnerability (CNVD-2019-28283)
Philips e-Alert is an electronic alert solution for MRI systems from Philips in the Netherlands, which is used to monitor and alert on MRI system performance. A security vulnerability exists in Philips e-Alert R2.1 and prior versions, which stems from the program not properly limiting the size of...
UBUNTU-CVE-2018-13259
An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one...
Weblate: 2nd issue>>> flood of email no rate limit on delete account confirmation email >>
There was no rate limit on delete account confirmation email, leading to user being able to send himself flood of emails...
FHCRM SQL Injection Vulnerability
FHCRM is a free and open source product management system based on ThinkPHP and Extjs. FHCRM 2018-02-11 and previous versions of the existence of SQL injection vulnerability, the attacker can index.php/User/read limit parameter to exploit the vulnerability to execute arbitrary SQL commands...
FHCRM SQL Injection Vulnerability (CNVD-2019-10134)
FHCRM is a free and open source product management system based on ThinkPHP and Extjs. A SQL injection vulnerability exists in FHCRM 2018-02-11 and earlier versions, which can be exploited by an attacker to execute arbitrary SQL commands via the /index.php/Customer/read limit parameter...
CVE-2018-16353
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-16354
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter...