8929 matches found
UBUNTU-CVE-2016-10764
In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...
OPENSUSE-SU-2019:1808-1 Security update for tomcat
This update for tomcat to version 9.0.21 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames bsc1131055. - CVE-2019-0221: Fixed a cross site scripting vulnerability...
WakaTime: Rate Limit too lenient for endpoint sending emails
Rate-limiting is a process that is used to define the rate at which consumers can access APIs. Also, it determines the speed at which a consumer can access APIs. Rate limit is calculated in real time. How to reproduce? 1. Sign-up for the account for WakaTime. Domain - www.wakatime.com 2. After...
DEBIAN-CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
UBUNTU-CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
WordPress WPS Limit Login plugin <= 1.4.5 - Stored Cross-Site Scripting (XSS) and Protection Bypass vulnerabilities
Stored Cross-Site Scripting XSS and Protection Bypass vulnerabilities found by Julio Potier in WordPress WPS Limit Login plugin versions = 1.4.5. Solution Update the WordPress WPS Limit Login plugin to the latest available version at least 1.4.6...
WPS Limit Login <= 1.4.5 - Multiple Issues
Protection Bypass, Stored XSS...
Trellix: Vulnerability Report: NO RATE LIMIT Password RESET
A vulnerability was found where there was no limit to the number of password reset requests that could be sent to a user. This could allow an attacker who obtained a user's session to send an unlimited number of OTPs to the user, potentially leading to denial of service...
DEBIAN-CVE-2019-12467
MediaWiki through 1.32.1 has Incorrect Access Control issue 1 of 3. A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
DEBIAN-CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
Code injection
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
WordPress Limit Login Attempts Plugin Authentication Bypass
An authentication bypass vulnerability exists in WordPress Limit Login Attempts Plugin. Successful exploitation of this vulnerability allows remote attackers to bypass authentication and the rate limiting service...
The vulnerability of the information protection system against unauthorized access is caused by an operation that goes beyond the buffer boundaries in memory, allowing a intruder to trigger a service failure.
The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...