12359 matches found
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
Design/Logic Flaw
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576: Improper Neutralization of Input During Web Page Generation
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
PT-2019-8510
Name of the Vulnerable Software and Affected Versions WordPress event-notifier plugin versions prior to 1.2.1 Description The issue concerns a cross-site scripting XSS flaw in the loading animation of the event-notifier plugin. Recommendations For versions prior to 1.2.1, update the event-notifie...
Security Bulletin: Multiple privilege escalation vulnerabilities in IBM DB2 HPU
Summary IBM DB2 High Performance Unload load privilege escalation in IBM DB2 HPU debug binary via trusted PATH and privilege escalation in IBM DB2 HPU via loading DB2 library Vulnerability Details Relevant CVE Information: CVEID: CVE-2019-4447 DESCRIPTION: IBM DB2 High Performance Unload load...
CVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path...
Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2019-40535)
Microsoft Outlook is a personal information management system software with features such as sending and receiving e-mail, calendars and more. An elevation of privilege vulnerability exists in Microsoft Outlook, which arises from a failure to adequately validate the format of incoming emails as...
CVE-2019-5037
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...
Integer overflow
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...
CVE-2019-5037
CVE-2019-5037 affects Nest Cam IQ Indoor (4620002) WeaveCASEEngine::DecodeCertificateInfo. The issue is an integer overflow in the Weave certificate processing that allows an attacker to set CertInfoLength to 0xFFFF, causing the TLVReader to advance beyond the packet into unmapped memory and cras...
Spoofing
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687...
PT-2019-16995 · Ibm · Ibm Informix Dynamic Server Enterprise Edition
Name of the Vulnerable Software and Affected Versions: IBM Informix Dynamic Server Enterprise Edition version 12.1 Description: The issue allows a local privileged Informix user to load a malicious shared library, potentially gaining root access privileges. Recommendations: For IBM Informix Dynam...
PT-2019-17423
Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor camera version 4620002 Description A denial-of-service issue exists in the Weave certificate loading functionality. It can be triggered by a specially crafted weave packet, causing an integer overflow and an out-of-bounds re...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
UBUNTU-CVE-2018-14671
In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
Adobe Prelude CC 2019 Insecure Library Loading (DLL Hijacking) Vulnerability
Adobe Prelude CC 2019 is a video recording and capture tool designed for intuitive and efficient media organizing and metadata entry, quickly tagging and transcoding video footage and creating rough cuts on the fly. An insecure library loading DLL hijacking vulnerability exists in Adobe Prelude C...
CVE-2018-14671: Improper Input Validation
In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability...