3167 matches found
CVE-2019-15395
CVE-2019-15395 affects Asus ZenFone 3s Max. A pre-installed app (com.asus.loguploaderproxy, v7.0.0.3_161222) exposes capabilities that allow other pre-installed apps to perform command execution via an accessible component. The issue arises because signatureOrSystem-permissioned apps can exploit ...
MaxLength - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-073
This module enables you to set a maximum length allowed on text fields and indicate how many characters are left. The module doesn't sufficiently filter strings leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact the malicious script will not be...
max-td.de Cross Site Scripting vulnerability
Security Researcher metamorfosec Helped patch 1948 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting max-td.de website and its users. Following coordinate...
SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-2)
This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...
SUSE-SU-2019:2227-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...
CVE-2017-18589
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
CVE-2017-18589
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
Design/Logic Flaw
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
CVE-2017-18589
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...
Denial Of Service (Dos)
ceph is vulnerable to denial of service. There is no defined limit for ListBucket max-keys in the RGW codebase, allowing users to crash the application against OMAPs holding bucket indices...
ceph: ListBucket max-keys has no defined limit in the RGW codebase
A flaw was found in the way the ListBucket function max-keys has no defined limit in the RGW codebase. An authenticated ceph RGW user can cause a denial of service attack against OMAPs holding bucked indices...
ceph: ListBucket max-keys has no defined limit in the RGW codebase
A flaw was found in the way the ListBucket function max-keys has no defined limit in the RGW codebase. An authenticated ceph RGW user can cause a denial of service attack against OMAPs holding bucked indices...
SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2105-1)
This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...
max-holder.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-923433 Security Researcher badmaxx Helped patch 1677 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting max-holder.com website and i...
Intel Turbo Boost Max Technology 3.0 driver Permission License and Access Control Issues Vulnerability
Intel Turbo Boost Max Technology 3.0 driver is an Intel Turbo Boost Max Technology 3.0 driver from Intel Corporation. A security vulnerability exists in Intel Turbo Boost Max Technology 3.0 driver 1.0.0.1035 and earlier versions. A local attacker can exploit this vulnerability to elevate privileg...
Edraw Max Heap Corruption Vulnerability
Edraw Max Billion Diagrams is a 2D business and technical diagramming software. The software can be used to create flowcharts, organizational charts, mind maps, network diagrams, floor plans, workflow diagrams, business diagrams and engineering drawings. A security vulnerability exists in Edraw M...
CVE-2019-12897
Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...
CVE-2019-12897
Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...