118 matches found
PT-2019-13284 · Jack2 +2 · Jack2 +2
Name of the Vulnerable Software and Affected Versions: JACK2 versions 1.9.1 through 1.9.12 Description: The issue is related to a "double file descriptor close" problem in the posix/JackSocket.cpp file of libjack in JACK2. This occurs during a failed connection attempt when jackd2 is not running...
UBUNTU-CVE-2019-6956
An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. It is a buffer over-read in psmixphase in libfaad/psdec.c...
CVE-2018-7926
Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific...
CVE-2018-1451
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046...
Exiv2 BigTiffImage::readData Assertion Failure Vulnerability
Exiv2 is a C++ library for extracting EXIF, LPTC and XMP metadata information from images. An assertion failure security vulnerability exists in Exiv2 version 0.26 bigtiffimage.cpp/BigTiffImage::readData, which can be exploited by an attacker to cause a service interruption...
nip2 Parameter Injection Vulnerability
nip2 is a GUI for the VIPS image processing library. A parameter injection vulnerability exists in nip2 8.4.0. The vulnerability arises because boxes.c in nip2 does not validate strings before starting a program specified by the BROWSER environment variable. A remote attacker could exploit this...
Apache Struts2 S2-054 Denial of Service Vulnerability
Struts2 is Apache Software Foundation is responsible for maintaining a MVC-based design pattern of the Web application framework for open source projects. Apache Struts2 suffers from a S2-054 denial of service vulnerability. Because the Apache Struts REST plugin uses an outdated JSON-lib library ...
wpa_supplicant: Reinstallation of the group key in the group key handshake
A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key GTK during a group k...
Apache Tomcat Directory Traversal Vulnerability (CNVD-2017-28315)
Apache Tomcat is a popular open source JSP application server program. Apache Tomcat suffers from a security restriction bypass vulnerability in the HTTP/2 implementation, which allows remote attackers to submit specially crafted requests to bypass security restrictions and conduct unauthorized...
LAME II_step_one function buffer overflow vulnerability
LAME is an open source MP3 audio compression software. A buffer overflow vulnerability exists in the LAME libmpgdecoder.a/mpglib/layer2.c/IIstepone function, which allows remote attackers to exploit the vulnerability by submitting a special file that induces the user to parse it, which can crash...
Struts2 Remote Command Execution Vulnerability in Shenzhen Pengjiao Project Management System
Shenzhen Pengjiao Project Management System is a product of Shenzhen Pengjiao Management Consultant Co., Ltd, which mainly serves primary and secondary schools, private educational institutions, government education and so on. A Struts2 remote command execution vulnerability exists in the Shenzhe...
IPUB Networked Digital Signage Management System v5.5 suffers from struts2 Remote Command Execution Vulnerability
IPUB Networked Digital Signage Management System is a set of digital signage management software. A struts2 remote command execution vulnerability exists in v5.5 of this product, which can be exploited by an attacker to gain control of a website...
Mozilla Firefox and Firefox ESR Graphite 2 Denial of Service Vulnerability (CNVD-2016-01645)
Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a suite of enterprise-class open source system monitoring tools data plotting written ...
glucose 2 vulnerable to arbitrary script execution
Overview glucose 2 is vulnerable to arbitrary script execution. glucose 2 is an RSS reader. glucose 2 is vulnerable to arbitrary script execution which is inserted in RSS feed, due to the improper processing of RSS feed output. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...
cuteeditor editor using the method of two-vulnerability and early warning-the black bar safety net
Method 1. Direct Download load. ashx configuration file /CuteSoftClient/CuteEditor/Load. ashx? type=image&file=../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name=”ynncConnectionString”...
cuteeditor using the method of two-vulnerability and early warning-the black bar safety net
Author: m@w01f 1. Direct Download load. ashx configuration file http://www.7747.net/CuteSoftClie ... ../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name="ynncConnectionString" connectionString="Server=....
LetterIt v2 (inc/session.php) Remote File Include Vulnerability
No description provided by source. ================================================================================== LetterIt RFI ================================================================================== Info:- Scripts: LetterIt download : http://otterware.net/index.php?dl=45 Version : ...