mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files...

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files...

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...

CVE-2016-10803

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

Design/Logic Flaw

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

CVE-2016-10803

CVE-2016-10803 affects cPanel prior to 57.9999.105, where newline injection is possible via LOC records (CPANEL-6923). Public source notes from multiple catalogs confirm the issue and identify the vulnerable version range. The Red Hat entry and CNVD/CVE records consistently reference the same CPA...

CVE-2016-10803

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

Reliance Electric VSM500 3HP 460V 3PH 180FR Loc AC Drive

Binary data 754777.prm...

Reliance Electric VSM500 1HP 230V 1PH 56FR Loc AC Drive

Binary data 754759.prm...

Reliance Electric VSM500 1HP 230V 3PH 56FR Loc AC Drive

Binary data 754765.prm...

Reliance Electric VSM500 1HP 230V 1PH 140FR Loc AC Drive

Binary data 754761.prm...

Directory Traversal

JavaServer Faces is vulnerable to directory traversal. A malicious user can access arbitrary files through loc parameters in the function ResourceManager.java:getLocalePrefix...

DEBIAN-CVE-2017-17508

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5Tsetloc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

libdwarf heap buffer overflow vulnerability (CNVD-2017-07537)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the 'dwarfreadlocexprop' function in libdwarf version 2017-03-21. An attacker can exploit this vulnerability to cause a heap buffer read over boundary...

DEBIAN-CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...

UBUNTU-CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...