SUSE-RU-2017:3408-1 Recommended update for rubygem-yajl-ruby

This update for rubygem-yajl-ruby provides the following fixes: - Update to version 1.3.1 - Fix crafted JSON file allows to crash ruby process with a SIGABRT bsc1066565, CVE-2017-1651...

PT-2017-12777 · Libfpx +1 · Libfpx +1

Name of the Vulnerable Software and Affected Versions: libfpx version 1.3.1 p6 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted fpx image. This is due to a problem in the...

Dzzoffice v1.3.1 Arbitrary File Download Vulnerability in Multiple Pages

DzzOffice is an open source cloud storage management tool. Dzzoffice v1.3.1 Arbitrary file download vulnerability exists in the 'pdfviewer.php', 'view.php', 'download.php' and 'attachment.php' pages, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in DzzOffice v1.3.1 Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A file upload vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the $GET'tpath' parameter. ...

ImageWorsener: Multiple vulnerabilities

Background ImageWorsener is a cross-platform command-line utility and library for image scaling and other image processing. Description Multiple vulnerabilities have been discovered in ImageWorsener. Please review the CVE identifiers referenced below for details. Impact A remote attacker could...

ImageWorsener Denial of Service Vulnerability (CNVD-2017-08100)

ImageWorsener is a set of image scaling and processing utilities. A denial of service vulnerability exists in the 'iwgetui16be' function in the imagew-util.c:422:24 file libimageworsener.a in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of servic...

ImageWorsener Denial of Service Vulnerability (CNVD-2017-08094)

ImageWorsener is a set of image scaling and processing utilities. A denial of service vulnerability exists in the 'iwgetui16be' function in the imagew-util.c:422:24 of the libimageworsener.a file in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of...

ImageWorsener Denial of Service Vulnerability (CNVD-2017-08090)

ImageWorsener is a set of image scaling and processing utilities. A denial of service vulnerability exists in the imagew-cmd.c:850:46 of the libimageworsener.a file in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of service except for a zero erro...

ImageWorsener Denial of Service Vulnerability (CNVD-2017-08092)

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the imagew-main.c:960:12 of the libimageworsener.a file in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of service buffer overflow with a special...

Unspecified vulnerability in python-jose

python-jose is an implementation of object signing and encryption. A security vulnerability exists in python-jose 1.3.1 and earlier versions; detailed vulnerability information is not currently available...

MantisBT < 1.2.19, 1.3.0 'view_type' XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

MantisBT < 1.2.19, 1.3.0 'view_type' XSS Vulnerability - Linux

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Atlassian Confluence AppFusions Doxygen 1.3.x Information Disclosure

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Information Exposure Through an Error Message CWE-209 Date found: 2016-06-29 Date published: - CVSSv3 Score:...

Wordpress Sirv plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the rowid parameter of the admin-ajax.php page of Wordpress plugin Sirv...

Sirv <= 1.3.1 - Authenticated SQL Injection

$POST ‘id’ is not escaped. sirvgetrowbyid is accessible for every registered user. $id = $POST'rowid'; $row = $wpdb-getrow"SELECT FROM $tablename WHERE id = $id", ARRAYA; $row'images' = unserialize$row'images'; echo jsonencode$row;...

Enterprise Routing Product iKuai Xiaobai SQL Injection Vulnerability

Enterprise Router ikuai Xiaobai is an enterprise router from China's All Access Convergence Network Technology. A SQL injection vulnerability exists in the enterprise router product iKuai Xiaobai 1.3.1 and historical versions. An attacker can exploit this vulnerability to inject arbitrary SQL...

Cross-Site Scripting

Overview Affected versions of emojione are vulnerable to cross-site scripting when user input is passed into the toShort, shortnameToImage, unicodeToImage, and toImage functions. Recommendation Update to version 1.3.1 or later. References - Issue 61 - GitHub Advisory...

Vulnerability warning: the Spring Boot framework, the expression injection vulnerability-vulnerability warning-the black bar safety net

High-risk vulnerability exposure always occurs at an unexpected moment: the weekend all of them are ready to enjoy the weekend time, the Spring Boot framework SpEL expression inject Common Vulnerability exposure exploit this vulnerability, a remote attacker on the server to execute arbitrary...

Oliver Cross-Site Scripting Vulnerability

Oliver formerly known as Webshare is a set of WebFTP resource manager using Ajax and PHP development . A cross-site scripting vulnerability exists in Oliver version 1.3.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

RedHat Update for tigervnc RHSA-2015:2233-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...