11783 matches found
CVE-2019-8037
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information...
Kimai 2 - Persistent Cross-Site Scripting
Exploit Title: Kimai 2- persistent cross-site scripting XSS Date: 07/15/2019 Exploit Author: osamaalaa Vendor Homepage: link Software Link: https://github.com/kevinpapst/kimai2 Fixed on Github : https://github.com/kevinpapst/kimai2/pull/962 Version: 2 1-Normal user will try to add timesheet from...
Kimai 2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Kimai 2- persistent cross-site scripting XSS Exploit Author: osamaalaa Vendor Homepage: link Software Link: https://github.com/kevinpapst/kimai2 Fixed on Github : https://github.com/kevinpapst/kimai2/pull/962 Version: 2 1-Normal...
CVE-2019-13510
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code...
Adobe Photoshop CC out-of-bounds write vulnerability (CNVD-2019-27488)
Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe.Photoshop CC is the Creative Cloud version of Photoshop. An out-of-bounds write vulnerability exists in Adobe Photoshop CC 19.1.8, 20.0.5 and earlier versions. An attacker can exploit this...
PT-2019-16570 · Zte · Zxhn F670
Name of the Vulnerable Software and Affected Versions: ZTE ZXHN F670 product versions up to V1.1.10P3T18 Description: The issue is related to a cross-site scripting vulnerability XSS due to incomplete input validation. An authorized user can exploit this to execute malicious scripts...
Fedora Update for freeradius FEDORA-2019-9454ce61b2
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
August 13, 2019—KB4512486 (Security-only update)
None None...
UBUNTU-CVE-2018-11782
In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server...
Nextcloud: SignUp using Fake Email
In this trial I used the email '[email protected]' and after pressing the SIGN UP button it will automatically redirect to https://ppp.woelkli.com/apps/preferredproviders/password/set/emailfakeforregister/H2qlEWHxQ3yiJgCsEXkR8, not through the account verification process first. For full the link Po...
AZL-6790 CVE-2019-13638 affecting package patch for versions less than 2.7.6-7
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...
CVE-2019-1010235
Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...
Cross site scripting
Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...
CVE-2019-1010235
Summary of CVE-2019-1010235 : Frog CMS 1.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the Snippets component. The fault is described in CNVD-2019-23999 as a lack of proper validation of client-side data, enabling attackers to execute client-side code. Reported impacts include co...
CVE-2019-1010235
Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...
Unspecified vulnerability in aubio
aubio is a tool for extracting annotations from audio signals. The product offers digital filters, phase vocoders, pitch tracking and transient/steady state separation. A security vulnerability exists in aubio 0.4.8 and earlier versions. An attacker can exploit this vulnerability to cause a denia...
National Security Agency Ghidra Path Traversal Vulnerability
National Security Agency Ghidra is a software reverse engineering SRE framework for the National Security Agency NSA. A path traversal vulnerability exists in National Security Agency Ghidra versions 9.0.4 and earlier. The vulnerability stems from a failure of a networked system or product to...
Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26666)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...
SNMPc Enterprise Edition 910 - Mapping Filename Buffer Overflow
SNMPc Enterprise Edition 910 - Mapping Filename Buffer Overflow !/usr/bin/python -- coding: utf-8 -- -------------------------------------------------------------------- Exploit: SNMPc Enterprise Edition 9 & 10 Mapping File Name BOF Date: 11 July 2019 Exploit Author: @xerubus | mogozobo.com Vendo...