4946 matches found
Design/Logic Flaw
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...
CVE-2017-7186
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...
CVE-2017-7186
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...
PT-2017-17565 · Pcre +3 · Pcre2 +4
Name of the Vulnerable Software and Affected Versions: PCRE versions 8.40 PCRE2 versions 10.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation for read access and an application crash, by triggering an invalid Unicode property...
CVE-2017-7186
CVE-2017-7186 affects libpcre1 (PCRE 8.40) and libpcre2 (PCRE2 10.23); it allows remote DoS via an invalid Unicode property lookup, potentially causing segmentation faults or crashes. Related issues (CVE-2017-7244, CVE-2017-7245, CVE-2017-7246) affect PCRE/pcretest in PCRE/PCRE2 with stack-based ...
CVE-2017-7186
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...
UBUNTU-CVE-2017-6209
Stack-based buffer overflow in the parseidentifier function in tgsitext.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service out-of-bounds array access and QEMU process crash via vectors related to parsing...
Resource Management Errors
Overview Affected versions of this package are vulnerable to Resource Management Errors. The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file. Remediation There is no fixed version...
CVE-2017-3002
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution...
PT-2017-1464 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.221 and earlier Description: The issue is related to an exploitable use after free vulnerability in the ActionScript2 TextField object, specifically concerning the variable property. This could lead to...
OS Property,3.0.9,SQL Injection
OS Property,3.0.9,SQL Injection Resolution: update to 3.10.0 Update notice: https://www.joomdonation.com/forum/os-property/56774-os-property-3-0-9-security-announcement.html...
tomcat: system property disclosure
It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...
tomcat: system property disclosure
It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...
tomcat: system property disclosure
It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...
Debian DLA-840-1 : libplist security update
Several vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause an application to crash by triggering a heap-based buffer overflow and memory allocation error in the plistfrombin...
Pornhub: http://ht.pornhub.com/ stored XSS in widget stylesheet
The researcher discovered a way to include JavaScript content through the CSS editor by leveraging the expression dynamic property...
Joomla OS Property component 'catIds' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'catIds' parameter of the Joomla OS Property component, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the catIds parameter...
Joomla OS Property 3.0.8 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...
Joomla OS Property 3.0.8 SQL Injection
Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/os-property-joomla-real-estate.html Demo:...
Joomla! Component OS Property 3.0.8 - SQL Injection
Joomla! Component OS Property 3.0.8 - SQL Injection Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...