173 matches found
TYPO3 Code Issue Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A code issue vulnerability exists in TYPO3 versions 8.0.0 through 8.7.26 and 9.0.0 through 9.5.7. The vulnerability arises from an improperly designed or implemented code development proces...
MediaWiki Access Control Error Vulnerability (CNVD-2019-36869)
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki 1.32.1 and earlier versions. No...
Eclipse Vert.xXML External Entity Injection Vulnerability
Eclipse Vert.x is an Eclipse Foundation toolkit for building responsive applications on the JVM , which is mainly used to build applications such as network utilities , Web applications , HTTP/REST microservices and so on. An XML external entity injection vulnerability exists in the 'isValid'...
CVE-2017-14596
creationtimestamp| type| source ---|---|--- 2017-09-20 19:26:21+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2338...
Dropbox: avrecode: global-buffer-overflow in get_neighbor()
Source: https://github.com/dropbox/avrecode Version: 2de743d Built using the Github instructions with afl-gcc and ASAN. Feeding this malformed .mp4 to recode triggers a global buffer overflow. ./recode roundtrip test003.mp4 mov,mp4,m4a,3gp,3g2,mj2 @ 0x61b00001f180 Protocol name not provided, cann...
UBUNTU-CVE-2015-8970
crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is processed, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted applicatio...
PT-2016-7172 · Alt Linux +2 · Alt Linux +2
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but details are not provided. Recommendations: At the moment, there is no information about a newer...
PT-2016-5878 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to a problem in Adobe Flash Player. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendation...
PT-2013-3905
Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description The issue is related to a security problem, but specific details are not provided. Recommendations At the moment, there is no information about a...
JVN#60969543 HL-SiteManager vulnerable to SQL injection
HL-SiteManager from Heartlogic is a contents management system CMS software. HL-SiteManager contains a SQL injection vulnerability. Impact A remote attacker may view or modify information stored by the product. Solution Do not use HL-SiteManager As patches will not be provided, users are...
Automatic File Content Type Recognition Tool contains memory allocation problem
Overview A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file1 package prior to 3.41. Description According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" AFCTR tool versions...
