Lucene search
+L

10158 matches found

osv_cve
osv_cve
•added 2018/12/23 2:29 a.m.•20 views

CVE-2018-20369

Barracuda Message Archiver 2018 has XSS in the errormsg exception-handling value for the ldapuser parameter to the cgi-mod/ldaploadentry.cgi module. The injection point of the issue is the AddUpdate module...

6.1CVSS5.8AI score0.00692EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2018/12/23 12:00 a.m.•10 views

PT-2018-15325

Name of the Vulnerable Software and Affected Versions Barracuda Message Archiver version 2018 Description The issue concerns an XSS vulnerability in the error msg exception-handling value for the ldap user parameter to the cgi-mod/ldap load entry.cgi module. The injection point of the issue is th...

6.1CVSS0.00692EPSS
SaveExploits3References3
osv_pysec
osv_pysec
•added 2018/12/21 11:29 p.m.•27 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6.1AI score0.0346EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2018/12/21 11:29 p.m.•25 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6AI score0.0346EPSS
SaveExploits1References1
Prion
Prion
•added 2018/12/21 11:29 p.m.•23 views

Design/Logic Flaw

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

7.5CVSS9.9AI score0.0346EPSS
SaveExploits1References1
PyPA
PyPA
•added 2018/12/21 11:29 p.m.•22 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS7.7AI score0.0346EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2018/12/21 10:00 p.m.•44 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

10AI score0.0346EPSS
SaveExploits1References1
CVE
CVE
•added 2018/12/21 10:00 p.m.•96 views

CVE-2018-20325

CVE-2018-20325 affects the Danijar Hafner definitions package for Python. The vulnerability resides in the load() method of definitions/parser.py, allowing execution of arbitrary Python commands and resulting in command execution. The available documents identify the vulnerable component and the ...

9.8CVSS9.9AI score0.0346EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2018/12/21 10:00 p.m.•8 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS0.0346EPSS
SaveExploits1References5
osv_alpine
osv_alpine
•added 2018/12/21 9:29 a.m.•17 views

ALPINE-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.02006EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/21 12:00 a.m.•8 views

CVE-2018-20325: Improper Control of Generation of Code

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6.3AI score0.0346EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/21 12:00 a.m.•8 views

PT-2018-15309

Name of the Vulnerable Software and Affected Versions Danijar Hafner definitions package for Python affected versions not specified Description The issue concerns the load method in definitions/parser.py, which can execute arbitrary Python commands, resulting in command execution. This allows for...

9.8CVSS0.0346EPSS
SaveExploits1References8
CNVD
CNVD
•added 2018/12/19 12:00 a.m.•24 views

LibRaw 'unpacked_load_raw()' Function Denial of Service Vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A denial of service vulnerability exists in the LibRaw 'unpackedloadraw' function. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

7.5CVSS8.4AI score0.02505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/12/19 12:00 a.m.•18 views

PT-2023-15159 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a segmentation violation via the function gf sm load init swf at scene manager/swf parse.c. No information is provided about the estimated number of potentiall...

9.8CVSS6.8AI score0.04615EPSS
SaveExploits150References373
Positive Technologies
Positive Technologies
•added 2018/12/19 12:00 a.m.•12 views

PT-2023-15164 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow in the gf text process sub function of filters/load text.c. This function is part of the GPAC MP4box, which is used for processing and...

9.8CVSS7.4AI score0.04615EPSS
SaveExploits150References372
Positive Technologies
Positive Technologies
•added 2018/12/19 12:00 a.m.•7 views

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

7.8CVSS0.01479EPSS
SaveExploits1References28
osv_debian
osv_debian
•added 2018/12/17 3:29 p.m.•15 views

DEBIAN-CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS5.3AI score0.0254EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/12/17 12:00 a.m.•8 views

PT-2018-14377

Name of the Vulnerable Software and Affected Versions Nagios Core version 4.4.2 Description The issue concerns an XSS flaw in the alert summary reports of plugin results. This can be demonstrated by a SCRIPT element delivered by a modified check load plugin to NRPE, allowing for potential...

5.5CVSS0.04453EPSS
SaveExploits6References43
Positive Technologies
Positive Technologies
•added 2018/12/14 12:00 a.m.•6 views

PT-2018-2790

Name of the Vulnerable Software and Affected Versions QEMU version 3.1.0 Description The issue is related to a buffer overflow risk in the load device tree function of the QEMU hardware emulator, specifically due to the use of the deprecated load image function. This could potentially allow an...

9.8CVSS0.04428EPSS
SaveExploits0References318
CNVD
CNVD
•added 2018/12/13 12:00 a.m.•20 views

Lisa-lab/pylearn2 inventory in command execution vulnerability

The Pylearn2/config/yamlparse.load function suffers from a command execution vulnerability in its implementation, which allows an attacker to perform arbitrary code operations...

7.7AI score
SaveExploits0
Rows per page
Query Builder