CVE-2024-34995

CVE-2024-34995 affects svnWebUI v1.8.3, where the dirTemps parameter in com.cym.controller.UserController#importOver enables arbitrary file deletion via crafted POST requests. Exploitation details are not provided beyond this description in the connected sources, and there is no confirmed patch v...

CVE-2024-34995

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserControllerimportOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request...

Default credentials

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

CVE-2023-41595

The CVE refers to xui-xray v1.8.3 where a default password enables an attacker to obtain sensitive information. Affected software/component: xui-xray 1.8.3. Root cause: use of a default credential, allowing unauthorized access to sensitive data. Impact: information disclosure with high severity (...

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

CVE-2020-21050

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gifprocessraster at fromgif.c...

Stack overflow

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gifprocessraster at fromgif.c...

CVE-2020-21050

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gifprocessraster at fromgif.c...

CVE-2020-18019

SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...

CVE-2018-20174

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function uicliphandledata that results in an information leak...

CVE-2018-20179

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess and results in memory corruption and probably even a remote code execution...

CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20176

rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service segfault...

CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20176

rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service segfault...

CVE-2018-20176

rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service segfault...

CVE-2018-20182

rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamlessprocessline that results in memory corruption and probably even a remote code execution...

CVE-2018-20176

CVE-2018-20176 affects rdesktop up to and including v1.8.3, with several Out-Of-Bounds Reads in secure.c that lead to a Denial of Service (segfault). The connected documents corroborate the vulnerable component (rdesktop RDP client), the affected version range, and the root cause as OOB reads in ...

CVE-2018-20175

CVE-2018-20175 affects rdesktop up to and including v1.8.3. The vulnerability stems from several Integer Signedness errors in mcs.c that cause Out-of-Bounds Reads, leading to Denial of Service (segfault). Connected advisories confirm the issue across multiple distributions and indicate fixes in l...

CVE-2018-20174

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function uicliphandledata that results in an information leak...