CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner." Mitigation An user can mitigate the risk of this vulnerability by: 1 Avoid using...

optimizely.com XSS vulnerability

Vulnerable URL: https://www.optimizely.com/resources/continually-optimize-experiences/?utmsource=resourcesmedium=websitealert/OPENBUGBOUNTY/...

openSUSE Security Update : fossil (openSUSE-2017-949)

This update for fossil to version 2.3 fixes the following issues : - Potential XSS vulnerability on the /help webpage boo1053267 This update also contains all upstream improvements and fixes in version 2.3 : - Update internal Unicode character tables, used in regular expression handling, from...

re2: Use-of-uninitialized-value in re2::Prog::Optimize

Project: https://code.googlesource.com/re2 Detailed report: https://oss-fuzz.com/testcase?key=6666938535116800 Project: re2 Fuzzer: libFuzzerre2fuzzer Fuzz target binary: re2fuzzer Job Type: libfuzzermsanre2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

MySQL < 5.7.13 Multiple Vulnerabilties

Binary data 802033.prm...

Power Clean - Optimize Cleaner - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Power Clean - Optimize Cleaner published at the 'play' market has multiple vulnerabilities...

FreeBSD TCP Link Handling TCP_MD5SIG / TCP_NOOPT Socket Option Denial of Service Vulnerability

FreeBSD is a Unix-like operating system. An error in FreeBSD's handling of TCP connections with the TCPMD5SIG and TCPNOOPT socket options allows a local attacker to conduct denial-of-service attacks by exploiting this vulnerability...

WordPress Optimize Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

Code injection

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...