ls-tech.kr Cross Site Scripting vulnerability OBB-1261750

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

OS Command Injection

jenkins-git-client-plugin is vulnerable to OS command injection via 'git ls-remote'...

jenkins-git-client-plugin: OS command injection via 'git ls-remote'

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

Fedora: Security Advisory for pure-ftpd (FEDORA-2020-5ac8d4c11a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : texlive-filesystem (openSUSE-2020-368)

This update for texlive-filesystem fixes the following issues : Security issues fixed : - Changed default user for ls-R files and font cache directories to user nobody bsc1159740 - Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions bsc1158910 . - Made cron script more failsa...

Security update for texlive-filesystem (moderate)

openSUSE Security Update: Security update for texlive-filesystem Announcement ID: openSUSE-SU-2020:0368-1 Rating: moderate References: 1150556 1155381 1158910 1159740 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for...

jenkins-git-client-plugin: OS command injection via 'git ls-remote'

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

PT-2020-22714

Name of the Vulnerable Software and Affected Versions texlive-filesystem affected versions not specified Description The issue concerns security fixes for texlive-filesystem, including changing the default user for ls-R files and font cache directories to user nobody, switching to rm instead of...

jenkins-git-client-plugin: OS command injection via 'git ls-remote'

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

jenkins-git-client-plugin: OS command injection via 'git ls-remote'

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

PT-2020-8630

Name of the Vulnerable Software and Affected Versions: Lifesize Express ls ex2 version 4.7.10 Description: The issue allows for XSS via the brand parameter in the "interface/interface.php" endpoint. This affects approximately 2000 devices. Recommendations: For version 4.7.10, avoid using the bran...

ls-x.de Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1944 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ls-x.de website and its users. Following coordinated...

ls-tc.de Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1944 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ls-tc.de website and its users. Following coordinated...

CVE-2019-17258

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEGLS+0x000000000000839c...

CVE-2019-17253

IrfanView 4.53 allows a User Mode Write AV starting at JPEGLS+0x000000000000a6b8...

CVE-2019-17247

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEGLS+0x0000000000007da8...

CVE-2019-17244

IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000001d8a...

CVE-2019-17243

IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000003155...

PT-2019-15030

Name of the Vulnerable Software and Affected Versions IrfanView version 4.53 Description The issue allows data from a faulting address to control code flow, which could potentially lead to exploitation. The specific location of the issue is at JPEG LS+0x0000000000003155. Recommendations For...

PT-2019-15034

Name of the Vulnerable Software and Affected Versions IrfanView version 4.53 Description The issue allows data from a faulting address to control a subsequent write address, starting at JPEG LS+0x0000000000007da8. Recommendations For IrfanView version 4.53, at the moment, there is no information...