4215 matches found
WS-2016-7089
In php-src, php-5.6.0RC1 to php-7.1.0beta3 are vulnerable to buffer overflow due to the use of an integer variable over “sizet” that leads to the loss of integrity and can damage the availability as well...
WS-2016-7090
In php-src, ”ftpfopenwrapper.c”, php-4.3.0pre1 to php-7.0.10RC1 are vulnerable to protocol downgrade attack, due to using a non-secured version of the FTP protocol...
PT-2016-2561
Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the allocation of an incorrect amount of memory in the mm-video-v4l2/vidc/venc/src/omx video...
CVE-2016-5639
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. dot dot in the src parameter...
PT-2016-6611
Name of the Vulnerable Software and Affected Versions Crestron AirMedia AM-100 versions prior to 1.4.0.13 Description A directory traversal issue exists in the cgi-bin/login.cgi file, allowing remote attackers to read arbitrary files by including a .. dot dot in the src parameter of the affected...
CVE-2016-5639: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. dot dot in the src parameter...
CVE-2016-6209
A user supplied GET parameter is used to create the value used as the src value of an iframe displayed on all pages. It allows for CSRF and javascript insertion techniques among others. An attacker could forge a malicious URL that could include javascript execution in the main browser frame...
The vulnerability of the Firefox browser, which allows a malicious actor to execute arbitrary code
The Mozilla Firefox browser contains a vulnerability related to a implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, using insufficient restrictions imposed by the style-s...
WS-2016-7091
In php-src, PHP-5.4.1-RC1 to php-7.0.8, the “psfilescleanupdir“ function is vulnerable against a Buffer overflow vulnerability via the “dirname” variable. This issue may be used to crash the program, and allow Remote code execution...
Wordpress fresh-page 插件-phpThumb.php文件src参数-跨站脚本漏洞
No description provided by source...
CVE-2016-2439
Buffer overflow in btif/src/btifdm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268...
CVE-2016-2428
libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...
PT-2016-1873
Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android 5.0.x versions prior to 5.0.2 Android 5.1.x versions prior to 5.1.1 Android 6.x versions prior to 2016-05-01 Description The issue is caused by a buffer overflow in the btif/src/btif dm.c component of th...
CVE-2016-2428: Improper Restriction of Operations within the Bounds of a Memory Buffer
libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...
CVE-2016-2439: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in btif/src/btifdm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268...
PT-2016-5206
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.5.x through 4.5.5.0 Description A cross-site scripting XSS issue exists in the SQL parser of phpMyAdmin, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to a...
Claws-Mail 'src/codeconv.c' Stack Buffer Overflow Vulnerability
Claws-Mail is a mail client product based on GTK+ development. Claws-Mail suffers from a stack buffer overflow vulnerability that could be exploited by remote attackers to submit a special request to crash the application or execute arbitrary code...
pdfium IsFlagSet (v8 memory management) - SIGSEGV Exploit
Exploit for hardware platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=622 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- ==31710==ERROR: AddressSanitizer: SEGV on unknown address...
NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability
Document Title: =============== NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ====================================...
