133 matches found
The vulnerability of the pgrep function in console-based applications for monitoring and terminating system processes in Props-ng allows a attacker to cause a service failure.
The vulnerability of the pgrep function in console-based applications for monitoring and terminating system processes in Props-ng is related to an error that causes buffer overflows. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through specially crafted...
CVE-2017-7831
A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "exposedProps" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox 57...
GStreamer gst_asf_demux_process_ext_stream_props function denial of service vulnerability
GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gst-plugins-ugly/gst/asfdemux/gstasfdemux.c/gstasfdemuxprocessextstreamprops function, which causes a denial of service for remote attackers...
Props - WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Props published at the 'play' market has multiple vulnerabilities...
openchange security, bug fix and enhancement update
evolution-mapi 0.28.3-12 - Add patch for RH bug 903241 Double-free on message copy/move 0.28.3-11 - Add patch for RH bug 902932 Cannot connect with latest samba 0.28.3-10 - Drop multilib by obsoleting evolution-mapi 0.28.3-9 RH bug 886914. 0.28.3-9 - Adapt to OpenChange 1.0 RH bug 767678. 0.28.3-...
fib_semantics.c out of bounds access vulnerability
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTAMAX to be used as an array size instead of RTNMAX, which leads to an "out of bound access" by the 1 dnfibprops dnfib.c, DECNet and 2 fibprops fibsemantics.c, IPv4 functions...
propsXSS.txt
PROPS is an open, extensible Internet publishing system designed specifically for periodicals such as newspapers and magazines who want to publish online, either exclusively or as an extension of their print publication. Its website is at http://props.sourceforge.net/ PROPS suffers from a Cross...
CVE-2004-1979
Summary: The CVE-2004-1979 entry describes a stored/ reflected cross-site scripting (XSS) vulnerability in the PROPS 0.6.1 product, specifically in the do_search.php script. The issue is triggered via the search_string parameter, enabling remote attackers to inject arbitrary HTML or web script. T...
CVE-2004-1980
CVE-2004-1980 affects PROPS 0.6.1, where a directory traversal in glossary.php enables remote viewing of arbitrary files via a .. sequence in the (1) module or (2) format variables. The vulnerability is described in public CVE/NVD records with a base score of 5.0 (MEDIUM) and network access with ...
CVE-2004-1979
Cross-site scripting XSS vulnerability in dosearch.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the searchstring parameter...
Props 0.6.1 XSS and Remote File Viewing Vulnerability
Title: Props 0.6.1 XSS and Remote File Viewing Vulnerability. Software: Props 0.6.1 Vendor: http://props.sourceforge.net/ Platform: PHP4 and MySQL Description: PROPS is an open, extensible Internet publishing system designed specifically for periodicals such as newspapers and magazines who want t...