51 matches found
UBUNTU-CVE-2023-32213
When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
UBUNTU-CVE-2022-2879
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...
The vulnerability of the mod_copy module in the ProFTPD FTP server allows a hacker to execute arbitrary code on the target system by sending CPFR and CPTO commands to the ProFTPD server.
The vulnerability of the modcopy module in the ProFTPD FTP server is related to errors during the checking of read and write access restrictions Limit READ and Limit WRITE. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending commands CP...
FHCRM SQL Injection Vulnerability (CNVD-2019-10134)
FHCRM is a free and open source product management system based on ThinkPHP and Extjs. A SQL injection vulnerability exists in FHCRM 2018-02-11 and earlier versions, which can be exploited by an attacker to execute arbitrary SQL commands via the /index.php/Customer/read limit parameter...
FHCRM SQL Injection Vulnerability
FHCRM is a free and open source product management system based on ThinkPHP and Extjs. FHCRM 2018-02-11 and previous versions of the existence of SQL injection vulnerability, the attacker can index.php/User/read limit parameter to exploit the vulnerability to execute arbitrary SQL commands...
CVE-2018-16354
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter...
Sql injection
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-16353
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-16353
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-16354
CVE-2018-16354 affects FHCRM (free/open source product management system). The connected CNVD/CVE records describe a SQL injection vulnerability exposed by the index.php/User/read limit parameter, with attackers potentially executing arbitrary SQL commands. FHCRM versions up to 2018-02-11 are imp...
DEBIAN-CVE-2018-1301
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode both log and build level...