215 matches found
The vulnerability of the res function in software for converting chemical substance file formats allows a hacker to execute arbitrary code.
The vulnerability of the res function in the Open Babel software for converting chemical substance file formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
UBUNTU-CVE-2022-42885
A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2007-0045
Multiple cross-site scripting XSS vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770...
SUSE CVE-2018-17281
There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...
SUSE CVE-2019-11700
A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox 67...
mwEmbed 跨站脚本漏洞
mwEmbed is Kaltura open source a Kaltura HTML5 media library . Enables you to take advantage of HTML5 and Flash's unified configuration and development API. A cross-site scripting vulnerability exists in versions prior to kaltura mwEmbed 2.92.rc1, which stems from a problem with some unknown...
UBUNTU-CVE-2022-42705
A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...
CVE-2022-36759
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...
CVE-2022-36759
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability that can be exploited by an attacker to perform SQL injection via the component /dish .php?resid=...
CVE-2022-37061
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow th...
The vulnerability of the api-res-py package in the Python programming language allows a perpetrator to execute arbitrary code.
The vulnerability of the api-res-py package for the Python programming language is related to the presence of the malicious dependency “request” without s. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Malicious code in res-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5759 Malicious code in res-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Backdoor in api-res-py
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
GHSA-6978-4W92-428P Backdoor in api-res-py
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
CVE-2022-31313
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
CVE-2022-31313
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
