D-Link 6600-AP and DWL-3600AP Buffer Overflow Vulnerability

The D-Link 6600-AP and the DWL-3600AP are both wireless access point devices from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link 6600-AP and DWL-3600AP. The vulnerability originates when a network system or product performs an operation on memory without properl...

GNU Debugger (GDB) Buffer Overflow Vulnerability

GNU gdb is a GNU Project debugger from the GNU Project. It supports debugging C, C++, Pascal, and FORTRAN programming languages. A buffer overflow vulnerability exists in the main module in GNU gdb. The vulnerability stems from a networked system or product that performs operations in memory...

mpg321 buffer overflow vulnerability

mpg321 is a command line mp3 player. A buffer overflow vulnerability exists in mpg321. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

OFFIS.de DCMTK Buffer Overflow Vulnerability

OFFIS.de DCMTK is a toolkit that implements the DICOM standard to inspect, build and convert DICOM image files, send and receive images over a network connection. A buffer overflow vulnerability exists in DcmRLEDecoder::decompress in OFFIS.de DCMTK 3.6.3 and earlier versions. The vulnerability...

MiniCMS mc-admin/page-edit.php file cross-site scripting vulnerability

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/page-edit.php file in MiniCMS version 1.10. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2019-21430)

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post-edit.php file in MiniCMS version 1.10, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

Synology Calendar Cross-Site Scripting Vulnerability (CNVD-2019-20976)

Synology Calendar is a file protection program from Synology Inc. of Taiwan, China that runs on Synology NAS Network Storage Server devices. A cross-site scripting vulnerability exists in Event Editor in Synology Calendar versions prior to 2.3.0-0615. The vulnerability stems from a lack of proper...

CVE-2019-10989

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-1099...

Sony Bravia TV Photo Sharing Plus Buffer Overflow Vulnerability

Sony Bravia TV is a smart TV from Sony Japan.Photo Sharing Plus is one of the photo sharing components. A buffer overflow vulnerability exists in the Photo Sharing Plus component in Sony Bravia TV versions 8.587 and earlier. The vulnerability originates when a networked system or product performs...

Remote Code Execution Vulnerability in Advantech WebAccess

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A remote code execution vulnerability exists in...

Linux Kernel Heap Buffer Overflow Vulnerability (CNVD-2019-47003)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A heap buffer overflow vulnerability exists in the Linux Kernel. The vulnerability arises from a networked system or product performing operations in memory without...

CloudBees Jenkins ElectricFlow Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . ElectricFlow Plugin is used in one of the...

Doxygen Cross-Site Scripting Vulnerability

Doxygen is a documentation generator for several programming languages. A cross-site scripting vulnerability exists in the templates/html/searchopensearch.php file in Doxygen. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Suricata Buffer Overflow Vulnerability

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

libpng buffer overflow vulnerability (CNVD-2019-13088)

libpng is a PNG reference library that can create, read and write PNG graphics files. A buffer overflow vulnerability exists in the 'contrib/pngminus/pnm2png.c:gettoken' function in libpng, which originates when a networked system or product performs an operation in memory without properly...

PT-2019-18309 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

Fortinet FortiSandbox Cross-Site Scripting Vulnerability (CNVD-2019-13555)

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. A cross-site scripting vulnerability exists in Fortinet FortiSandbox versions...

waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2019-13569)

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in Waimai Super Cms version 20150505. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side...

GPAC Buffer Overflow Vulnerability (CNVD-2019-13567)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in gfbin128parse in the utils/osdivers.c file in GPAC version 0.7.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting i...

Buffer overflow vulnerability in SGO South satellite navigation platform software

Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd. is subordinate to Nanfang Surveying and Mapping Group, and is the first national high-tech enterprise in China that has passed through the high-precision GNSS technology industry chain and realized large-scale and market-oriented...