534 matches found
gpmf-parser heap buffer overflow vulnerability
gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap buffer overflow vulnerability exists in the 'GPMFValidate' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability ...
gpmf-parser heap overflow vulnerability
gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause a...
gpmf-parser buffer overflow vulnerability
gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A buffer overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause ...
gpmf-parser 'GPMF_Type' function heap buffer overflow vulnerability
gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap buffer overflow vulnerability exists in the 'GPMFType' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to...
Apache Storm User Impersonation Vulnerability
Apache Storm is the United States Apache Apache Software Foundation, a set of Clojure Concurrent Programming Language developed using free open source distributed real-time computing system. A security vulnerability exists in Apache Storm versions 1.0.6 and earlier, 1.2.1 and earlier, and 1.1.2 a...
WordPress Pinterest Feed plugin <=1.1.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by d4wner in WordPress Pinterest Feed plugin versions =1.1.1. Solution Update the WordPress Pinterest Feed plugin to the latest available version at least 1.1.2...
WordPress Simple Login Log plugin <=1.1.0 - Authenticated SQL Injection vulnerability
Authenticated SQL Injection vulnerability found Neven Biruski Defencecode in WordPress Simple Login Log plugin versions =1.1.0 Solution Update the WordPress Simple Login Log plugin to the latest available version at least 1.1.2...
Kozea Radicale Authentication Error Vulnerability
Kozea Radicale, a project of the French company Kozea, is a free and open source CalDAV Calendar Synchronization Open Protocol and CardDAV Address Book Synchronization Open Protocol server solution. An authentication error vulnerability exists in Kozea Radicale versions prior to 1.1.2 and 2.x...
CVE-2017-8075
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
Foswiki 1.1.0 - 1.1.1 Topic Settings Remote Privilege Escalation Vulnerability
Foswiki is prone to a remote privilege escalation vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Foswiki Topic Settings Remote Privilege Escalation Vulnerability
Foswiki is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foswiki:foswiki"...
Debian DLA-679-1 : qemu-kvm security update
Multiple vulnerabilities have been found in qemu-kvm : CVE-2016-8576 qemu-kvm built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could occur while processing USB command ring in 'xhciringfetch'. CVE-2016-8577 qemu-kvm built with the virtio-9p back-end...
NUUO NVRmini 2 and NetGear ReadyNAS Surveillance Buffer Overflow Vulnerability
NUUO NVRmini 2 is a network video recorder from NUUO.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution from NetGear that integrates video surveillance software, storage, switching and network management. A buffer overflow vulnerability exists in NUUO NVRmini 2 versio...
MantisBT 1.1.2 - 1.2.17 XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2015-1334
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted 1 AppArmor profile or 2 SELinux label...
BlackCat CMS Cross-Site Scripting Vulnerability
BlackCat CMS is a content management system CMS based on PHP5 and HTML5 developed by Black Cat team. A cross-site scripting vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name of a new group in backend/group/indexphp...
PT-2015-6970 · Blackcat · Blackcat Cms
Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.1.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name in a new group to "backend/groups/index.php" API endpoint. This enables attackers to perform cross-site scripting XS...
phpMoAdmin Arbitrary Command Execution Vulnerability
phpMoAdmin is a MongoDB GUI management tool . An arbitrary command execution vulnerability exists in phpMoAdmin 1.1.2, which allows remote attackers to execute arbitrary commands via shell metacharacters in object parameters...
[RT-SA-2014-015] Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0
Advisory: Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Tapatalk plugin for the WoltLab Burning Board forum software, which allows attackers to inject arbitrary JavaScript code via URL parameters...