CVE-2018-6953

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

CVE-2018-6953

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

CVE-2018-6953

In CCN-lite 2, the NDNTLV parser fails to verify that a component’s length field matches the actual component length, leading to a buffer overflow and out-of-bounds memory accesses. Affected component: NDNTLV parsing logic in CCN-lite 2. Root cause: mismatch between declared length and actual dat...

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

Buffer overflow

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

CVE-2018-6948

CVE-2018-6948 affects CCN-lite 2, where the function ccnl_prefix_to_str_detailed can overflow a buffer when writing a prefix to buf. The prefix maximum is CCNL_MAX_PREFIX_SIZE, but with NFN enabled, additional characters (e.g., NFN and R2C tags) are written, allowing an NFN-R2C packet with a pref...

CVE-2018-6891

Bookly 1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-paymentdetailsdialog.js...

CCN-lite 'cnb_parse_lev' Function Denial of Service Vulnerability

CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the 'cnbparselev' function in CCN-lite versions prior to 2.00. An attacker could exploit this vulnerability to cause an invalid read...

CVE-2018-6834

static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href...

CVE-2018-6835

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

CVE-2018-6835

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

CVE-2018-6834

static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href...

Design/Logic Flaw

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

Design/Logic Flaw

static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href...

CVE-2018-6834

Consolidated details show Etherpad Lite before v1.6.3 is vulnerable to Cross‑Site Scripting via static/js/pad_utils.js (pad_utils.js) triggered by window.location.href. The issue is documented across multiple sources (NVD, CNVD, OSV, SUSE, CNVD variants) with the affected component identified as ...

CVE-2018-6835

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

CVE-2018-6834

static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href...

CVE-2018-6835

Etherpad Lite before v1.6.3 contains a vulnerability in node/hooks/express/apicalls.js where JSONP is mishandled, allowing remote attackers to bypass intended access restrictions. The issue is tied to CVE-2018-6835. Affected software/version details from connected sources indicate the fix was rel...