53 matches found
Apache Tika XML External Entity Denial of Service Vulnerability
Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide read and write Microsoft Office format documents open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work provides a unified...
tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service
An infinite loop vulnerability was discovered in Apache Tika prior to version 1.18. A remote attacker could exploit this to cause a denial of service via crafted file...
Apache Tika <= 1.17 Multiple Vulnerabilities
Apache Tika is prone to multiple vulnerabilities, including command execution and denial of service DoS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2018-1335
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...
DEBIAN-CVE-2014-9497
Buffer overflow in mpg123 before 1.18.0...
GNU Wget < 1.18 - Access List Bypass / Race Condition Vulnerabilities
Exploit for multiple platform in category remote exploits ''' ============================================= - Discovered by: Dawid Golunski - dawidatlegalhackers.com - https://legalhackers.com - https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html - CVE-2016-709...
Research Artisan Lite Security Bypass Vulnerability
Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A security vulnerability exists in Research Artisan Lite prior to version 1.18, which is caused by the program failing to properly perform authentication. A remot...
CVE-2015-2975
Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...
JVN#10559378: Research Artisan Lite does not properly perform authentication
Research Artisan Lite provided by Research Artisan Project is an access analysis tool. Research Artisan Lite does not properly perform authentication CWE-592. Impact An attacker may perform operations in Research Artisan Lite without logging into the system. Solution Update the Software Update to...
lcms: Null pointer dereference (DoS) by handling transformations of monochrome profiles
cmsxform.c in LittleCMS aka lcms or liblcms 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."...
Moderate: Red Hat Security Advisory: lcms security update
Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply "lcms" is a small-footprint,...
Libra PHP File Manager 1.18/2.0 - Local File Inclusion
!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua =...
Code-Crafters Ability Mail Server 1.18 - errormsg Cross-Site Scripting
Code-Crafters Ability Mail Server 1.18 - errormsg Cross-Site Scripting source: https://www.securityfocus.com/bid/10695/info Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks. The serve...