CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

PT-2019-10901

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 Description: A lock screen issue allowed unauthorized access to photos via the Reply With Message feature on a locked device. This was addressed with improved state management. Recommendations: For versions prior to...

CVE-2018-4387: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2019-6501

CVE-2019-6501 affects QEMU 3.1, where scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c can perform out-of-bounds memory writes/reads. This could allow memory corruption within the QEMU process. The Initial Description provides no explicit details on vulnerable versions beyond QEMU 3.1, nor any...

Cross site scripting

In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...

CVE-2019-9765

In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...

CVE-2019-9765

In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...

CVE-2019-9765

In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...

PT-2019-19856

Name of the Vulnerable Software and Affected Versions Blog mini version 1.0 Description A security issue exists in the application, where an XSS attack can be performed via the author name of a comment reply. This issue is related to the articleDetails function in the app/main/views.py file and t...

[SECURITY] Fedora 28 Update: perl-Email-Address-List-0.06-1.fc28

Parser for From, To, Cc, Bcc, Reply-To, Sender and previous prefixed with Resent- e.g. Resent-From headers...

PT-2019-6088

Name of the Vulnerable Software and Affected Versions QEMU version 3.1 Description The issue is related to out-of-bounds write and read operations in the scsi handle inquiry reply function in hw/scsi/scsi-generic.c. This can potentially allow an attacker to cause a denial of service...

Improper Restriction of XML External Entity Reference in bedework:bw-webdav

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java...

GHSA-5P52-J8PW-J7X5 Improper Restriction of XML External Entity Reference in bedework:bw-webdav

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java...

Remote Code Execution (RCE)

libXfont.so is vulnerable to remote code execution. An integer overflow bug in the functions fsgetreply, fsallocglyphs and fsreadextentinfo allows a remote attacker to execute commands via a crafted xfs reply that triggers a buffer overflow...

CVE-2018-17156

In FreeBSD before 11.2-STABLEr340268 and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an ICMP reply packet when using a non-standard value for the net.inet.icmp.quotelen sysctl...

Buffer overflow

In FreeBSD before 11.2-STABLEr340268 and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an ICMP reply packet when using a non-standard value for the net.inet.icmp.quotelen sysctl...

CVE-2018-17156

In FreeBSD before 11.2-STABLEr340268 and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an ICMP reply packet when using a non-standard value for the net.inet.icmp.quotelen sysctl...

curl: LDAP NULL pointer dereference

A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...