592 matches found
http-live-simulator path traversal vulnerability
http-live-simulator is an HTTP file server. A path traversal vulnerability exists in the http-live-simulator npm package version 1.0.5, which stems from a failure of a networked system or product to properly filter for special elements in the path of a resource or file. An attacker could use this...
CVE-2019-5423
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker...
RUSTSEC-2018-0020 Possible use-after-free with `proplist::Iterator`
Affected versions contained a possible use-after-free issue with property list iteration due to a lack of a lifetime constraint tying the lifetime of a proplist::Iterator to the Proplist object for which it was created. This made it possible for users, without experiencing a compiler error/warnin...
CVE-2018-16223
Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamerapreferences.xml in the QBee Cam application through 1.0.5 for Android allows an attacker to retrieve the username and password...
PortfolioCMS Cross-Site Request Forgery Vulnerability
portfolioCMS is a content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in portfolioCMS version 1.0.5. A remote attacker can exploit this vulnerability to create a new page with admin/portfolio.php?newpage=true...
portfolioCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-16511)
portfolioCMS is a content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in portfolioCMS version 1.0.5. A remote attacker can exploit this vulnerability to update website settings with the help of the admin/aboutus.php file...
Microsoft ASP.NET Core Security Feature Bypass Vulnerability (Jul 2018)
This host is missing an important security update according to Microsoft advisory CVE-2018-8171. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
portfolioCMS SQL Injection Vulnerability
portfolioCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in portfolioCMS version 1.0.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the 'preview' parameter...
Facebook Clone Script 1.0.5 - search SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 POC : SQLi : Parameter : search Type : Union base...
Malicious Package
Overview Version 1.0.5 of dictum.js contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.5 of this module is found installed y...
openSUSE Security Update : freexl (openSUSE-2018-217)
This update for freexl fixes the following issues : freexl was updated to version 1.0.5 : - No changelog provided by upstream - Various heapoverflows in 1.0.4 have been fixed : - CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 - CVE-2018-7438:...
Security update for freexl (important)
This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...
Security update for freexl (important)
This update for freexl fixes the following issues: freexl was updated to version 1.0.5: No changelog provided by upstream Various heapoverflows in 1.0.4 have been fixed: CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 readminibiffnextrecord boo1082774 CVE-2018-7438: heap-buffer-overflow in...
DEBIAN-CVE-2018-7436
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...
CVE-2018-7439
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...
711cms V1.0.5 has cross-site scripting vulnerability
711cms is the first open source cms for APP application market, pc station + wap station + APP native client three stations in one, to provide a complete APP application market construction, operation and promotion of one-stop solution. A cross-site scripting vulnerability exists in version 711cm...
CVE-2017-1000201
The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack...
tcmu-runner denial of service vulnerability
tcmu-runner is a daemon for handling user space for LIO TCM user backend storage. A security vulnerability exists in tcmu-runner versions 1.0.5 through 1.2.0. An attacker can exploit the vulnerability to cause a denial of service...
CVE-2017-15227
Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on...