10680 matches found
Arbitrary file deletion
Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch...
CVE-2015-2254
Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch...
CVE-2015-2254
Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch...
CVE-2015-2254
Huawei OceanStor UDS devices running software prior to V100R002C01SPC102 are vulnerable to CVE-2015-2254. A remote attacker can intercept and alter patch-loading information, which may result in deletion of directory files and compromise of device functions when loading a patch. The issue is tied...
CVE-2019-9658
Checkstyle before 8.18 loads external DTDs by default...
DEBIAN-CVE-2019-9658
Checkstyle before 8.18 loads external DTDs by default...
NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution
/ NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution Vendor: NREL Product web page: https://beopt.nrel.gov Affected version: 2.8.0.0, 2.7.0.0 and 2.6.0.1 Summary: The BEoptaC/ Building Energy Optimization Tool software provides capabilities to evaluate residential building designs...
Denial Of Service (DoS)
svgexport is vulnerable to denial of service. A lack of timeout when loading an external image can result in a denial of service condition...
CVE-2018-18497
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...
CVE-2018-18495
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions...
Microsoft Teams Dynamic Link Library Unsafe Loading Vulnerability
Microsoft Teams is a unified communications platform that combines continuous workplace chat, video conferencing, file storage and application integration. An unsafe loading of dynamic link libraries vulnerability exists in the Microsoft Teams installer. An attacker could exploit the vulnerabilit...
Microsoft Windows 7 Dynamic Link Library Unsafe Loading Vulnerability
Windows 7 is an operating system developed by Microsoft with the kernel version number Windows NT 6.1. Microsoft Windows 7 suffers from an insecure loading of dynamic link libraries vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted DLL files...
JVN#69181574: Windows 7 may insecurely load Dynamic Link Libraries
In standard DLL files provided by Windows 7, there are some DLL files read from the same directory where the program resides when executing the program CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting" , thus there is no plan to...
openSUSE Security Update : libqt5-qtbase (openSUSE-2019-265)
This update for libqt5-qtbase provides the following fixes : Security issues fixed : - CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 - CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Non-security issues fixed : - Fix dynamic loading of...
Security update for libqt5-qtbase (moderate)
openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2019:0265-1 Rating: moderate References: 1096328 1099874 1108889 1118595 1118596 1120639 Cross-References: CVE-2018-15518 CVE-2018-19873 Affected Products: openSUSE Leap 15.0 An update that solves two...
The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to gain access to protected information.
The vulnerability of the Cisco Unified Communications Manager web interface relates to insufficient protection for saved passwords during the loading of configuration pages. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...
CVE-2019-9116
DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...
February 21, 2019—KB4491101 (OS Build 10240.18135)
None None...
The vulnerability of Juniper Networks’ Junos Space platform, related to the unlimited loading of malicious files, allows attackers to upload malware-infected files.
The vulnerability of the Juniper Networks Junos Space network resource management platform is related to the ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to load malicious files into the system...