PT-2018-9335

Name of the Vulnerable Software and Affected Versions LightSAML versions prior to 1.3.5 Description The issue is related to Incorrect Access Control in signature validation in readers, located in src/LightSaml/Model/XmlDSig/, which can lead to impersonation of any user from the Identity Provider...

CVE-2018-10191

In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrbvmexec when handling OPGETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code...

CVE-2018-10191: Integer Overflow or Wraparound

In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrbvmexec when handling OPGETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code...

src-reizen.nl XSS vulnerability

Open Bug Bounty ID: OBB-596669 Description| Value ---|--- Affected Website:| src-reizen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Samsung Mobile Device Email Application Cross-Site Scripting Vulnerability

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android M is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Email application is one of the email applications. Email application is one of the email...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140: Improper Neutralization of Input During Web Page Generation

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

PT-2018-18882

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with M6.0 software Description The issue affects the Email application, allowing for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute. Recommendations For Samsung mobile...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

PT-2018-18756

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue is related to a crafted src attribute of an IMG element within a URI, which can lead to XSS. Recommendations For Open-AudIT Professional version 2.1, consider validating and sanitizing...

CVE-2018-8978: Improper Neutralization of Input During Web Page Generation

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI...

PT-2018-3324

Name of the Vulnerable Software and Affected Versions: GNOME file-roller versions prior to 3.29.91 Description: The issue allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. This is related to the sanitize filename functio...

CVE-2018-1000070

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...

CVE-2018-1000070: Improper Control of Generation of Code

Bitmessage PyBitmessage version v0.6.2 and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0 contains a Eval injection vulnerability in main program, file src/messagetypes/init.py function constructObject that can result in Code Execution. This attack appears to be exploitabl...

PT-2018-9256

Name of the Vulnerable Software and Affected Versions: PyBitmessage version v0.6.2 Description: The issue concerns a code execution vulnerability due to an eval injection in the main program, specifically in the constructObject function within the file src/messagetypes/ init .py. This vulnerabili...

CVE-2018-1000100

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

CVE-2018-1000100: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

PT-2018-3515

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box versions 0.7.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the memory, which can be exploited to execute arbitrary code. This can be achieved by providing a specially crafted MP4 file to the...