1072 matches found
Rockwell Automation 1771-OP General Purpose Discrete I/O
Binary data 753423.prm...
Xpdf PE Vulnerability (CNVD-2019-22437)
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A PE vulnerability exists in the PostScriptFunction::exec function in Function.cc in Xpdf 4.01.01 in the psOpRoll scenario. No detailed vulnerability details are provided at this time...
Care2x 2.7 (HIS) Hospital Information System SQL Injection
Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...
DEBIAN-CVE-2018-19975
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OPCOUNT can read a DWORD...
DEBIAN-CVE-2018-15863
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...
CVE-2018-15863
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...
CVE-2018-14940
PHPCMS 9 is affected by CVE-2018-14940 where remote attackers can trigger a denial of service by sending oversized font_size, height, and width values to api.php?op=checkcode. The connected sources reiterate the same description and CVSS data (NVD), with no concrete remediation details provided i...
PT-2018-12816
Name of the Vulnerable Software and Affected Versions PHPCMS version 9 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, by sending a request to the "api.php?op=checkcode" endpoint with large values for the font size, height, and width...
CVE-2018-14940: Uncontrolled Resource Consumption
PHPCMS 9 allows remote attackers to cause a denial of service resource consumption via large fontsize, height, and width parameters in an api.php?op=checkcode request...
PT-2018-11494
Name of the Vulnerable Software and Affected Versions SeedDMS versions prior to 5.1.8 Description A directory traversal flaw allows an authenticated attacker to write to or potentially delete arbitrary files by using a .. dot dot in the "qquuid" parameter of the "op/op.UploadChunks.php" endpoint...
CVE-2018-12940: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...
CVE-2018-12939: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal flaw in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows an authenticated attacker to write to or potentially delete arbitrary files via a .. dot dot in the "op/op.UploadChunks.php" "qquuid" parameter. NOTE: this can be leveraged to execute arbitrary code by using...
radare2 heap out-of-bounds read vulnerability
Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in javaswitchop in libr/anal/p/analjava.c in radare2 2.6.0. An...
UBUNTU-CVE-2018-12322
There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...
PT-2018-11122
Name of the Vulnerable Software and Affected Versions radare2 version 2.6.0 Description The issue is a heap out of bounds read in the 6502 op function, located in libr/anal/p/anal 6502.c, which can be triggered by a crafted iNES ROM binary file. Recommendations For radare2 version 2.6.0, at the...
PT-2018-11121
Name of the Vulnerable Software and Affected Versions radare2 version 2.6.0 Description The issue is a heap out of bounds read in the java switch op function, located in anal java.c, which can be triggered by a crafted Java binary file. Recommendations For radare2 version 2.6.0, update to a newer...
UBUNTU-CVE-2018-12248
An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...
PT-2018-11075
Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description A heap-based buffer over-read issue was found, associated with OP ENTER, due to the failure of mrbgems/mruby-fiber/src/fiber.c to extend the stack when handling many arguments to fiber. Recommendations For mruby...
radare2 denial of service vulnerability (CNVD-2018-12200)
Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the avropanalyze function in radare2 2.5.0. A remote attacker can...