55 matches found
CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...
CVE-2020-15007
A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...
Memory corruption
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...
Mail.ru: Reflected XSS in city-mobil.ru/
Reflected XSS in city-mobil.ru due to unsafe usage of GET parameter...
Mail.ru: PHP code injection at tz.mail.ru
A chain of bugs involving unsafe usage of PHP unserialize led to possibility of code execution in tz.mail.ru...
Arbitrary Code Execution
rediswrapper is vulnerable to arbitrary code execution. The vulnerability exists due to the unsafe usage of pickle deserialization...
Deserialization Of Untrusted Object
symfony/symfony contains an unsafe deserialization usage. A failure to validate untrusted inputs from user passing to the function unserialize causes deserialization of malicious object, allowing an attacker to inject malicious payloads which can lead to file deletions or raw output being echoed...
Code injection
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
Remote Code Execution (RCE)
ua-parser is vulnerable to remote code execution RCE. This is due to the unsafe usage of yaml.load, which allows arbitrary script to be executed when a yaml file is loaded...
Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities
SEC Consult has also released a blog post describing the attack scenarios of the vulnerabilities within this advisory in detail and a video which shows the remote attack. Exploit code has been developed as well but will not be released for now. Blog:...
CVE-2016-6186
Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...
openSUSE Security Update : libvirt (openSUSE-SU-2014:0593-1)
libvirt was updated to fix various bugs and security issues : CVE-2013-7336: libvirt: unprivileged user can crash libvirtd during spice migration CVE-2013-6456: unsafe usage of paths under /proc/$PID/root Bugfixes for libvirt client killed on reboot shutdown. bnc852005 Also notify systemd when we...
websvn-xssfhce.txt
WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...