CVE-2017-12097

CVE-2017-12097 affects the delayed_job_web rail gem, where the filter functionality is vulnerable to cross-site scripting. A specially crafted URL can cause arbitrary JavaScript execution in the victim’s browser, enabling an attacker to phish an authenticated user. Affected versions include 1.2.9...

Vanguard Marketplace Digital Products PHP Arbitrary File Upload Vulnerability

Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A security vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. The vulnerability can be exploited to upload arbitrary files via the Add New...

GraphicsMagick 'ReadMNGImage' function buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'ReadMNGImage' function in the coders/png.c file in GraphicsMagick version 1.4 snapshot-20171217 Q8. A remote...

Pivotal Single Sign-On for PCF Cross-Site Scripting Vulnerability

Pivotal Single Sign-On for PCF is a suite of single sign-on security access tools for PCFs from Pivotal Software, USA. A security vulnerability exists in Pivotal Single Sign-On for PCF versions 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.3. An attacker can exploit the vulnerability by injecting...

Integer overflow vulnerability in libxls 'xls_preparseWorkSheet' function (CNVD-2017-37688)

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

libxls 'xls_preparseWorkSheet' function integer overflow vulnerability

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlspreparseWorkSheet' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of a malicious XLS file...

Libxls Out-of-Bounds Write Vulnerability

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the xlsmergedCells function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

libxls 'xls_appendSST' function integer overflow vulnerability

libxls is a C library for reading Exce xls files. An integer overflow vulnerability exists in the 'xlsappendSST' function in libxls version 1.4. A remote attacker can exploit this vulnerability to execute code memory corruption with the help of specially crafted XLS files...

Creative Management System Lite SQL Injection Vulnerability

Creative Management System CMS Lite is a web content management system with features such as menu design, site backup and site calendar. A SQL injection vulnerability exists in CMS Lite version 1.4. A remote attacker can exploit the vulnerability by sending the 'S' parameter to the index.php file...

GNU Libextractor 'EXTRACTOR_dvi_extract_method' Function Denial of Service Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORdviextractmethod' function in the plugins/dviextractor.c file in GNU Libextractor version 1.4. A remote attacker can exploit this vulnerability ...

PT-2017-3192 · Korenix · Jetnet5628G-R +7

Name of the Vulnerable Software and Affected Versions: Korenix JetNet5018G version 1.4 Korenix JetNet5310G version 1.4a Korenix JetNet5428G-2G-2FX version 1.4 Korenix JetNet5628G-R version 1.4 Korenix JetNet5628G version 1.4 Korenix JetNet5728G-24P version 1.4 Korenix JetNet5828G version 1.1d...

GHSA-85R7-W5MV-C849 Rack Vulnerable to Path Traversal

rack/file.rb Rack::File in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATHINFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path...

DEBIAN-CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

GNU Libextractor Denial of Service Vulnerability (CNVD-2017-30423)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A denial of service vulnerability exists in the 'flacmetadata' function of the flacextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to cause a denial...

GNU Libextractor Denial of Service Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A denial of service vulnerability exists in the 'EXTRACTORwavextractmethod' method of the wavextractor.c file in GNU Libextractor version 1.4, which stems from the program failing to detect the...

Vebto Pixie Image Editor Cross-Site Request Forgery Vulnerability

Vebto Pixie Image Editor is an image editor. A cross-site request forgery vulnerability exists in Vebto Pixie Image Editor versions 1.4 and 1.7. A remote attacker can exploit this vulnerability by sending the 'url' parameter to the Launderer.php file to disclose information or execute arbitrary...

Pivotal Cloud Foundry XML External Entity Injection Vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Single Sign-On is one of the single sign-on components. An XML external entity injection...

Scrapy Denial of Service Vulnerability

Scrapy is a use of Python language , open source , scalable Web data scraping framework. A denial of service vulnerability exists in Scrapy version 1.4. A remote attacker can exploit this vulnerability to cause a denial of service memory consumption with the help of a larger file...

CloudBees Jenkins Periodic Backup Plugin Security Bypass Vulnerability

CloudBees Jenkins is a set of U.S. CloudBees continuous integration tools based on Java development , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Periodic Backup Plugin is one of the file regular backup...

eapmd5pass 'assess_packet' function out-of-bounds read vulnerability

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. An out-of-bounds read vulnerability exists in the 'assesspacket' function of eapmd5pass.c:134 in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network...