CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Code injection

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Design/Logic Flaw

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-23037

CVE-2020-23037 affects Portable Ltd Playable v9.18. A code injection vulnerability exists in the filename parameter that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST request. The issue is rooted in the filename handling and, per linked documents, is demonstrated ...

CVE-2020-36485

Portable Ltd Playable v9.18 contains an arbitrary file upload vulnerability in the filename parameter of the upload module, allowing arbitrary code execution via a crafted JPEG file. Root cause noted as insufficient validation in the upload filename handling; mitigation/remediation details are no...

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

Portable Ltd Playable 代码问题漏洞

Portable Ltd Playable is a Full HD media player for Pc from Portable Ltd, UK. A security vulnerability exists in Portable Playable v9.18, which stems from a lack of effective filtering and restriction in the filename parameter of the software's upload module. The vulnerability allows an attacker ...

Portable Ltd Playable 代码注入漏洞

Portable Ltd Playable is a Full HD media player for Pc from Portable Ltd, UK. Portable Ltd Playable suffers from a code injection vulnerability that stems from Portable Ltd Playable v9.18 containing a code injection vulnerability in the filename parameter. An attacker could use this vulnerability...

Vulnerability of operating systems iPadOS, watchOS, iOS, Mac OS, caused by integer overflow, allowing attackers to execute arbitrary code

The vulnerabilities of operating systems iPadOS, watchOS, iOS, and Mac OS are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker to execute arbitrary code on the target system by opening a PDF file...

ZTE MF971R sms_cmd_status_info cross-site scripting vulnerability

Summary An exploitable Cross-Site-Scripting vulnerability exists in ZTE MF971R LTE router version wainnerversion:BDPLKPLMF971R1V1.0.0B06. A specially crafted HTTP request can cause an XSS vulnerability and as a result arbitrary JavaScript code execution in the victim’s browser. An attacker needs ...

ZTE MF971R xmlclient cross-site scripting vulnerability

Summary An exploitable Cross-Site-Scripting XSS vulnerability exists in ZTE MF971R LTE router version wainnerversion:BDPLKPLMF971R1V1.0.0B06. A specially-crafted HTTP request can cause an XSS vulnerability and as a result arbitrary JavaScript code execution in the victim’s browser. An attacker...

The vulnerability of Honeywell’s industrial portable computer operating system exists due to the failure to take measures to neutralize certain special elements, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Honeywell’s industrial portable computer operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

多款Foxit产品资源管理错误漏洞

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in several Foxit products, which stems from a failure to properly determine memory boundaries when processing PDF files. A remote attacker could use this vulnerability to exploit specially crafted P...

多款Foxit产品资源管理错误漏洞

Foxit PhantomPDF and others are products of Foxit, a Chinese company.Foxit PhantomPDF is a PDF document reader.Foxit PDF Reader is a PDF reader.Foxit PDF Editor is a PDF editor. A resource management error vulnerability exists in multiple Foxit products that originates from a boundary error when...

[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.4-1.fc33

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

Fedora: Security Advisory for apr (FEDORA-2021-6ae5a11a61)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: apr-1.7.0-14.fc35

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

MGASA-2021-0428 Updated apr packages fix security vulnerability

An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue...