Design/Logic Flaw

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/isoserver/isoserver.c, as demonstrated by examples/serverexamplegoose/serverexamplegoose.c and examples/serverexample6140025/serverexample6140025.c...

PT-2019-18283 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: The issue is related to a use-after-free in the getState function, located in the file mms/iso server/iso server.c. This is demonstrated by examples in server example goose.c and server example 61400 25....

modulemd uses an unsafe function for processing externally provided data

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...

libIEC61850 Buffer Overflow Vulnerability (CNVD-2019-43853)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetsetProtocolFilter' function in the hal/ethernet/linux/ethernetlinux.c file in libIEC61850 version 1.3.1. An attacker could exploit this vulnerability to cause a segment error...

libIEC61850 Resource Management Error Vulnerability (CNVD-2019-43852)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in Memorymalloc and Memorycalloc in the hal/memory/libmemory.c file in libIEC61850 version 1.3.1. An attacker can exploit this vulnerability to cause a denial of service memory leak...

libIEC61850 Denial of Service Vulnerability (CNVD-2019-01864)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in Memorymalloc in the hal/memory/libmemory.c file in libIEC61850 version 1.3.1. An attacker can exploit this vulnerability to cause a denial of service memory leak...

PT-2019-17972 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A problem has been identified in the Ethernet setProtocolFilter function, located in the hal/ethernet/linux/ethernet linux.c file, which can cause a segmentation fault SEGV. This issue is demonstrated by...

PT-2019-7860 · Modulemd · Modulemd

Name of the Vulnerable Software and Affected Versions: modulemd versions 1.3.1 and earlier Description: The issue is related to the use of an unsafe function for processing externally provided data, which can lead to remote code execution. Recommendations: For modulemd versions 1.3.1 and earlier,...

Terminology Code Execution Vulnerability

Terminology is an EFL programming language terminal emulator. A code execution vulnerability exists in versions of Terminology prior to 1.3.1 that stems from the program failing to properly handle popmedia and can be exploited by a remote attacker to execute code...

PbootCMS Code Execution Vulnerability

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A security vulnerability exists in PbootCMS version V1.3.1 build 2018-11-14, which stems from the program failing to use the correct protection mechanism. A remote attacker can exploit t...

GHSA-3MPR-HQ3P-49H9 Prototype Pollution in mixin-deep

Versions of mixin-deep before 1.3.1 are vulnerable to prototype pollution via merging functions. Recommendation Update to version 1.3.1 or later...

CVE-2018-9853

Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to an unprivileged account on the server...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server April 2016 CPU (CVE-2016-3426, CVE-2016-3427) shipped with Tivoli Netcool Performance Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the Oracle April 2016 Critical Patch Update, plus four additional vulnerabilities. These may affect some configurations of IBM...

phpIPAM cross-site scripting vulnerability (CNVD-2018-09472)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the app/sections/user-menu.php file in versions prior to phpIPAM 1.3.1. A remote attacker can exploit this vulnerability to inject arbitrary code or denial of...

WordPress Web-Dorado Instagram Feed WD plugin cross-site scripting vulnerability (CNVD-2018-08291)

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Web-Dorado Instagram Feed WD plugin is a social media content sharing plugin used in ... A cross-site scripting...

Prototype Pollution

Overview Versions of mixin-deep before 1.3.1 are vulnerable to prototype pollution via merging functions. Recommendation Update to version 1.3.1 or later. References - HackerOne Report - GitHub Advisory...

phpIPAM cross-site scripting vulnerability (CNVD-2018-08575)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the app/tools/mac-lookup/index.php file in phpIPAM version 1.3.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

MyBB My Arcade 1.3 Cross Site Scripting

Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS Date: 2/21/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=411 Version: 1.3 Tested on: Ubuntu 17.10 1. Description: The My Arcade plugin adds ...

WBCE CMS Cross-Site Scripting Vulnerability (CNVD-2018-02994)

WBCE CMS is an easy-to-use open source content management system based on PHP/MySQL. A cross-site scripting vulnerability exists in WBCE CMS 1.3.1. A remote authenticated administrator can use the "Modify Page" screen to inject arbitrary web script or HTML...

freeSSHd Elevation of Privilege Vulnerability

FreeSSHd is a free SSH server for Windows. A security vulnerability exists in FreeSSHd version 1.3.1. An attacker can exploit the vulnerability to start processes with elevated privileges...