776 matches found
CVE-2019-1010189
CVE-2019-1010189 affects mgetty prior to 1.2.1. The flaw causes an infinite loop leading to DoS (program may not terminate) in g3/g32pbm.c. Attack vector is Local via opening a specially crafted file. Fixed in version 1.2.1. Public references include Mageia MGASA-2020-0076 and Fedora’s 2019-732b5...
Design/Logic Flaw
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1...
mgetty denial of service vulnerability
mgetty is a modem handler. A denial of service vulnerability exists in the g3/g32pbm.c file in versions prior to mgetty 1.2.1, which can be exploited by an attacker to cause a denial of service infinite loop with the help of a specially crafted file...
Arbitrary File Deletion Vulnerability in cszcms-1.2.1
CSZCMS is an open source web application that allows to manage all the content and settings on a website. An arbitrary file deletion vulnerability exists in cszcms-1.2.1, which can be exploited by an attacker to delete arbitrary files on the server when deleting an avatar...
Stored XSS Vulnerability in Cloud EC E-commerce System Version V1.2.1
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system V1.2.1 version of the existence of stored XSS vulnerability, an attacker can exploit...
CVE-2018-19893
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...
GoPro gpmf-parser out-of-bounds write vulnerability
GoPro gpmf-parser is a parser for telemetry data in GPMF format used in GoPro cameras. An out-of-bounds write vulnerability exists in OpenMP4Source in GPMFmp4reader.c in GoPro gpmf-parser 1.2.1. No detailed vulnerability details are provided at this time...
GHSA-F9CM-QMX5-M98H Prototype Pollution in merge
Versions of merge before 1.2.1 are vulnerable to prototype pollution. The merge.recursive function can be tricked into adding or modifying properties of the Object prototype. Recommendation Update to version 1.2.1 or later...
PT-2018-13593
Name of the Vulnerable Software and Affected Versions merge versions prior to 1.2.1 Description The issue allows the merge.recursive function in the merge package to be tricked into adding or modifying properties of the Object prototype. This can lead to a denial of service attack, as these...
Moderate severity vulnerability that affects org.apache.storm:storm-core
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons...
GHSA-898J-5CC8-CMF5 ZipSlip in org.apache.storm:storm-core
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...
PbootCMS V1.2.1 SQL Injection Vulnerability in Frontend
PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.2.1 has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information...
CVE-2018-18211
PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI...
Mgetty Buffer Overflow Vulnerability (CNVD-2019-03438)
Mgetty is a getty replacement program for data and fax operations. A stack buffer overflow vulnerability exists in the contrib/scrts.c file in versions of Mgetty prior to 1.2.1, which can be exploited to execute arbitrary code or cause a denial of service with the help of command line arguments...
Mgetty Buffer Overflow Vulnerability
Mgetty is a getty replacement program for data and fax operations. A buffer overflow vulnerability exists in the faxrec.c file in versions of Mgetty prior to 1.2.1, which stems from a failure of the program to filter the 'mailto' in the 'faxnotifymail' function. parameter in the 'faxnotifymail'...
UBUNTU-CVE-2018-16743
An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy, which can cause a stack-based buffer overflow...
DEBIAN-CVE-2018-16741
An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function doactivate does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or characters within a file created by the "faxq-helper activate " command...
PT-2018-13716 · Mgetty +2 · Mgetty +2
Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1 Description: A stack-based buffer overflow issue can be triggered via a command-line parameter in the contrib/scrts.c file. Recommendations: For versions prior to 1.2.1, update to version 1.2.1 or later to resol...
GHSA-VQCQ-MRMW-MCMG Rubyzip gem contains a Directory Traversal vulnerability in zip file component
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...