ALPINE-CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

PT-2017-2105

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2017-03-24 Description The issue is caused by a heap-based buffer overflow in the t1 decoder parse charstrings function in psaux/t1decode.c of the FreeType library. This can allow a remote attacker to write data beyo...

D-Link DIR-615 - Cross-Site Request Forgery

D-Link DIR-615 - Cross-Site Request Forgery Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link wireless router...

CVE-2017-7398

CVE-2017-7398 affects D-Link DIR-615 HW: T1 with FW:20.09. The issue is a CSRF vulnerability that allows an attacker to perform actions on a router when the admin is authenticated, e.g., changing the Security option, hiddenSSID/SSID, or a security-password. Impact is limited to unauthorized confi...

UBUNTU-CVE-2016-6304

Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service memory consumption via large OCSP Status Request extensions...

PT-2016-3288

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1u OpenSSL versions prior to 1.0.2i OpenSSL versions prior to 1.1.0a MySQL Server versions 5.6.33 and earlier MySQL Server versions 5.7.15 and earlier Description The issue is related to multiple memory leaks in t...

天睿电子图书管理系统 guanli2.asp 参数 T1 SQL注入漏洞

No description provided by source...

PT-2019-7249

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1 Description A buffer over-read issue occurs in the T1 Get Private Dict function within type1/t1parse.c due to a lack of checks on the new values of cur and limit before proceeding. This issue affects FreeType...

PT-2019-7340

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1 Description The issue is related to a heap-based buffer over-read in the T1 Get Private Dict function located in type1/t1parse.c. Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6016

CVE-2015-6016 affects ZyXEL routers: P-660HW-T1 v2 with ZyNOS 3.40(AXH.0), PMG5318-B20A (firmware 1.00AANC0b5), and NBG-418N, where the admin account uses a default password of 1234 . This enables remoting attackers to obtain administrative access via unspecified vectors. The connected sources co...

CVE-2015-6017

CVE-2015-6017 refers to multiple cross-site scripting (XSS) vulnerabilities in the ZyXEL P-660HW-T1 v2 router running ZyNOS firmware 3.40(AXH.0). The issue resides in the web form at /Forms/rpAuth_1, where an attacker can craft requests that inject arbitrary script or HTML via the LoginPassword o...

PT-2015-2964

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 versions 3.40AXH.0 ZyXEL PMG5318-B20A versions 1.00AANC0b5 ZyXEL NBG-418N affected versions not specified Description The issue is related to the use of a default password for the administrator account in the firmware of certa...

PT-2015-7116

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 version 3.40AXH.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the LoginPassword or hiddenPassword parameters in the Forms/rpAuth 1 module. Recommendations For ZyXEL P-660HW-T1 versi...

CVE-2015-6016: Undefined Security Weakness

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0, PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors...

CVE-2015-6017: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

Multiple ZyXEL Router Credential Management Vulnerabilities

ZyXEL NBG-418N, PMG5318-B20A and P-660HW-T1 are all products of ZyXEL Technology Corporation.NBG-418N and P-660HW-T1 are wireless broadband routers; PMG5318-B20A is a wireless switch product. A security vulnerability exists in multiple ZyXEL routers. A remote attacker could exploit the...

PT-2016-3506

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to several functions in FreeType, including t1 parse font matrix, cid parse font matrix, t42 parse font matrix, and ps parser load field, which do not check return values. This...