CVE-2020-7625

CVE-2020-7625 affects the Node module op-browser . Versions up to and including 1.0.6 are vulnerable to a command injection that allows an attacker to execute arbitrary commands via the vulnerable url function. The issue can lead to remote code execution (RCE) with high impact. Remediation: upgra...

hiproxy (1.3.3) potentially affected by CVE-2020-7625 via op-browser (1.0.6)

op-browser NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on op-browser and may be impacted: - hiproxy 1.3.3 Source cves: CVE-2020-7625 Source advisory: SNYK:JS-OPBROWSER-564259...

Command Injection

Overview op-browser is a module that open browser window and set proxy. Affected versions of this package are vulnerable to Command Injection. The url parameter can be controlled by users without any sanitization. PoC var root = require"op-browser"; root.open'chrome','& touch Song','',''; Details...

creagraphy.nl Cross Site Scripting vulnerability OBB-1102870

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

op-ameland.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1085279 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Vulnerability of the i2400m_op_rfkill_sw_toggle() function (driver/net/wimax/i2400m/op-rfkill.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the i2400moprfkillswtoggle function driver/net/wimax/i2400m/op-rfkill.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2019-19051

CVE-2019-19051 : A memory leak in the Linux kernel function i2400m_op_rfkill_sw_toggle() (drivers/net/wimax/i2400m/op-rfkill.c) prior to 5.3.11 can allow a local attacker to cause memory exhaustion and denial of service. The issue is fixed in 5.3.11 (ChangeLog-5.3.11). References include related ...

SQL Injection Vulnerability in Library Bibliographic Search System op***.php Page

Jiangsu Huiwen Software Co., Ltd. is a company specializing in information management system software development, sales. A SQL injection vulnerability exists in the library bibliographic retrieval system op.php page, which can be exploited by attackers to obtain sensitive information from the...

CVE-2019-15316

Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation to NT AUTHORITY\SYSTEM via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition...

CVE-2019-14975

Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fzchartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string...

CVE-2019-14975

Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fzchartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string...

libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...

DEBIAN-CVE-2019-14468

GnuCOBOL 2.2 has a buffer overflow in cbpushop in cobc/field.c via crafted COBOL source code...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

Memory corruption

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010292

CVE-2019-1010292 affects Linaro/OP-TEE OP-TEE (optee_os). The vulnerability is in boundary checks, which could lead to corruption of any memory the TA can access. Impact: memory corruption within TA-accessible memory. Fixed in: v3.4.0. CVSS (NVD v3.0): 9.8 (CRITICAL), network-attack vector, low c...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010296

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core kernel. The component is: opteeos. The fixed version is: 3.4.0 and later...

CVE-2019-1010293

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The component is: opteeos. The fixed version is: 3.4.0 and later...