3088 matches found
CVE-2020-17479
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...
CVE-2020-17479
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...
Input validation
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...
CVE-2020-17479
CVE-2020-17479 affects jpv (Json Pattern Validator) prior to version 2.2.2. The issue is due to improper input validation, demonstrated by a corrupted array. Documented impact remains high (per CVSS data in the initial entry), but no exploitation details are provided within the supplied materials...
CVE-2020-17479
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...
CVE-2020-17479: Improper Input Validation
jpv aka Json Pattern Validator before 2.2.2 does not properly validate input, as demonstrated by a corrupted array...
CSRF Vulnerability in polaris-website
Impact CSRF vulnerability: In some very specific circumstances, an attacker would be able to update your settings. Basically you would need to navigate to hackersite.com while logged into our panel. Then they could modify your settings. They couldn't check if it worked, nor could they read your...
GHSA-WHRH-9J4Q-G7PH CSRF Vulnerability in polaris-website
Impact CSRF vulnerability: In some very specific circumstances, an attacker would be able to update your settings. Basically you would need to navigate to hackersite.com while logged into our panel. Then they could modify your settings. They couldn't check if it worked, nor could they read your...
[SECURITY] Fedora 32 Update: mutt-1.14.5-1.fc32
Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...
Cross-Site Scripting (XSS)
github.com/astaxie/beego/issues is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the Router Pattern...
The vulnerability of the /Pattern component of the Nitro Pro application for reading and editing PDF files, which allows a hacker to execute arbitrary code.
The vulnerability of the Nitro Pro PDF reading and editing application’s /Pattern component is related to a numerical overflow in the memory buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted PDF file...
PCRE2: Denial of service
Background PCRE2 is a project based on PCRE Perl Compatible Regular Expressions which has a new and revised API. Description PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...
Cisco IOS Software Secure Shell DoS (cisco-sa-ssh-dos-Un22sd2A)
According to its self-reported version, IOS is affected by a vulnerability in the Secure Shell SSH server code due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An authenticated, remote attacker can exploit this, by creating ...
StreamRipper32 2.6 - Buffer Overflow
StreamRipper32 version 2.6 buffer overflow proof of concept exploit. Exploit Title: StreamRipper32 2.6 - Buffer Overflow PoC Date: 2020-05-14 Exploit Author: Andy Bowden Tested On: Win10 x64 Download Link: http://streamripper.sourceforge.net/sr32/StreamRipper3226.exe Vendor Page:...
The vulnerability of the SplashOutputDev::tilingPatternFill function (SplashOutputDev.cc), a library for displaying PDF files in Poppler, allows a hacker to trigger a service failure.
The vulnerability of the SplashOutputDev::tilingPatternFill function SplashOutputDev.cc, which is part of the Poppler PDF rendering library, is related to division by zero errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2020-6092
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file...
CVE-2020-6092
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file...
CVE-2020-6092: Integer Overflow or Wraparound
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file...
Nitro Pro PDF Pattern Object Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file...
CVE-2020-8792: Use of Insufficiently Random Values
The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid...