Lucene search
+L

697 matches found

OSV
OSV
added 2019/03/24 2:29 a.m.7 views

CVE-2019-9963

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap...

7.8CVSS7.2AI score0.0141EPSS
SaveExploits1References1
NVD
NVD
added 2019/03/24 2:29 a.m.23 views

CVE-2019-9963

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap...

7.8CVSS8.1AI score0.0141EPSS
SaveExploits1References1
OSV
OSV
added 2019/03/24 2:29 a.m.7 views

CVE-2019-9965

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap...

7.8CVSS7.2AI score0.01303EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/24 2:29 a.m.9 views

CVE-2019-9964

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey...

7.8CVSS7.2AI score0.01381EPSS
SaveExploits1References1
Prion
Prion
added 2019/03/24 2:29 a.m.16 views

Code injection

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey...

6.8CVSS8AI score0.01381EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/03/24 2:29 a.m.20 views

Design/Logic Flaw

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap...

6.8CVSS8AI score0.0141EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/03/24 2:29 a.m.8 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

7.8CVSS7.2AI score0.01257EPSS
SaveExploits0References1
CVE
CVE
added 2019/03/24 1:22 a.m.53 views

CVE-2019-9965

XnView MP 0.93.1 for Windows is affected by CVE-2019-9965. A crafted file can cause a denial-of-service (application crash) and potentially other unspecified impact, via the Windows heap allocator function ntdll!RtlReAllocateHeap. The vulnerability is documented across multiple feeds (NVD, Red Ha...

7.8CVSS8AI score0.01303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/03/24 1:22 a.m.30 views

CVE-2019-9965

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap...

8.1AI score0.01303EPSS
SaveExploits0References1
CVE
CVE
added 2019/03/24 1:22 a.m.48 views

CVE-2019-9964

XnView MP 0.93.1 on Windows is affected by CVE-2019-9964. A crafted file can trigger a denial of service (application crash) and possibly other unspecified impact, related to ntdll!RtlpNtMakeTemporaryKey. Affected component is the image viewer executable (XnView MP 0.93.1) and the vulnerability c...

7.8CVSS8AI score0.01381EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/03/24 1:21 a.m.25 views

CVE-2019-9963

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap...

8.1AI score0.0141EPSS
SaveExploits1References1
CVE
CVE
added 2019/03/24 1:21 a.m.47 views

CVE-2019-9963

XnView MP 0.93.1 on Windows is vulnerable to a denial of service via a crafted file, related to ntdll!RtlFreeHeap. Multiple sources (NVD/NVD-derived entries and CNVD/Red Hat mirrors) confirm the impact as a crash and potential unspecified consequences. The vulnerability affects the Windows build ...

7.8CVSS8AI score0.0141EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/03/24 1:21 a.m.50 views

CVE-2019-9962

The CVE-2019-9962 entry concerns XnView MP 0.93.1 on Windows. The vulnerability arises from handling crafted files that trigger a crash (denial of service) and potentially other unspecified impacts, linked to VCRUNTIME140!memcpy. Affected component is the image viewer application (XnView MP 0.93....

7.8CVSS8AI score0.01257EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/03/24 1:21 a.m.29 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

8.1AI score0.01257EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.17 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.01EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.12 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.01EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.11 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.02324EPSS
SaveExploits6References7
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.26 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP C6003 multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References4
VulnCheck KEV
VulnCheck KEV
added 2018/12/20 12:00 a.m.8 views

VulnCheck KEV: CVE-2018-7522

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

7.2CVSS6.8AI score0.00431EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.13 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH Aficio MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH Aficio MP multifunctional device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.01EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder