Sql injection

The MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors...

Sql injection

SQL injection vulnerability in the MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE:...

CVE-2014-1925

Koha CVE-2014-1925 affects the MARC framework import/export function (admin/import_export_framework.pl). Affected versions include Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3. Description: an SQL injection vulnerability allows remote authenticated us...

CVE-2014-1924

The CVE-2014-1924 entry affects Koha’s MARC framework import/export function (admin/import_export_framework.pl). The vulnerability occurs in Koha versions before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3, where the import/export interface does not require auth...

CVE-2014-1924

The MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors...

CVE-2014-1925: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE:...

CVE-2019-19698

CVE-2019-19698 affects the libwav library (marc-q libwav) up to version 2017-04-20. The root cause is a NULL pointer dereference in wav_content_read() located in libwav.c, which can lead to a denial of service. Multiple sources (NVD, Red Hat, CVE databases, CNVD, PRION, CVELIST) corroborate the s...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

CVE-2019-19698

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

PT-2019-15919

Name of the Vulnerable Software and Affected Versions marc-q libwav versions prior to 2017-04-20 Description The issue is related to a NULL pointer dereference in the wav content read function at libwav.c. Recommendations For versions prior to 2017-04-20, consider restricting access to the wav...

CVE-2019-19698: NULL Pointer Dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wavcontentread at libwav.c...

CVE-2019-16348

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

Null pointer dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

CVE-2019-16348

CVE-2019-16348 affects marc-q’s libwav up to 2017-04-20, where a NULL pointer dereference occurs in the function referenced as gain_file() in wav_gain.c. The issue is documented as a NULL pointer dereference without publicly disclosed details on exploitation vectors within the provided sources. S...

CVE-2019-16348

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

CVE-2019-16348: NULL Pointer Dereference

marc-q libwav through 2017-04-20 has a NULL pointer dereference in gainfile at wavgain.c...

marc-o-polo.com Cross Site Scripting vulnerability

Security Researcher k0t Helped patch 2132 vulnerabilities Received 9 Coordinated Disclosure badges Received 95 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting marc-o-polo.com website and its users. Following coordinated a...

WordPress Duplicate Page plugin <= 3.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Marc-Alexandre Montpas in WordPress Duplicate Page plugin versions = 3.3. Solution Update the WordPress Duplicate Page plugin to the latest available version at least 3.4...

marc-uzan-expertise-philatelie.com XSS vulnerability

Open Bug Bounty ID: OBB-620514 Description| Value ---|--- Affected Website:| marc-uzan-expertise-philatelie.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

Serial SWATter Tyler “SWAuTistic” Barriss Charged with Involuntary Manslaughter

Tyler Raj Barriss, a 25-year-old serial "swatter" whose phony emergency call to Kansas police last month triggered a fatal shooting, has been charged with involuntary manslaughter and faces up to eleven years in prison. Tyler Raj Barriss, in an undated selfie. Barriss's online alias -- "SWAuTisti...