libIEC61850 Heap Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A heap buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 1.4.0 and earlier. The vulnerability stems from a lack of proper validation of clien...

Typora Cross-Site Scripting Vulnerability (CNVD-2020-03714)

Typora is an editor. A cross-site scripting vulnerability in Typora 0.9.9.31.2 and earlier macOS and 0.9.81 and earlier Linux, which stems from a lack of proper validation of client-side data by the WEB application, can be exploited by an attacker to execute client-side code...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-01236)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab. Th...

CVE-2019-14863

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

DEBIAN-CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

UBUNTU-CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

ZenPhoto cross-site scripting vulnerability (CNVD-2020-03822)

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in the 'sanitizestring' function in versions of Zenphoto prior to 1.4.9, which stems from a lack of proper...

GPAC buffer overflow vulnerability (CNVD-2020-00232)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in the 'av1parsetilegroup' function in the mediatools/avparsers.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from a networked system or product performing operations in memory...

GoPro GPMF-parser heap buffer overflow vulnerability

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in the 'GPMFSeekToSamples' function of the GPMFparse.c file in GoPro GPMF-parser version 1.2.3. The vulnerability stems from a networked system or product...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03575)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.SDX20 is a modem.WLAN is one of the wireless LAN components. A buffer overflow vulnerability exists in WLAN in multiple Qualcomm...

GraphicsMagick 'ImportRLEPixels' function buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'ImportRLEPixels' function of the coders/miff.c file in GraphicsMagick. The vulnerability stems from a networke...

Red Hat Keycloak Cross-Site Scripting Vulnerability (CNVD-2020-01944)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A cross-site scripting vulnerability exists in the login-status-iframe.html page in Red Hat Keycloak, which stems from a lack of proper...

Elasticsearch Kibana Cross-Site Scripting Vulnerability (CNVD-2020-03584)

Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A cross-site scripting vulnerability exists in Elasticsearch Kibana versions prior to 6.8.6 and prior to 7.5.1. The vulnerability stems from the WEB...

HCL Technologies AppScan Source Cross-Site Scripting Vulnerability

HCL Technologies AppScan Source is a static application security testing solution from HCL Technologies India. A cross-site scripting vulnerability exists in HCL Technologies AppScan Source. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An...

Xfig fig2dev buffer overflow vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Xfig fig2dev. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and writ...

Libyang Buffer Overflow Vulnerability

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A buffer overflow vulnerability exists in versions prior to libyang 1.0-r5. The vulnerability stems from a networked system or product that performs operations in memory withou...

knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute.

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

Linux kernel buffer overflow vulnerability (CNVD-2019-42786)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product that performs operations in memory without properl...