UBUNTU-CVE-2018-6335

A Malformed h2 frame can cause 'std::outofrange' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM 3.25.2, 3.24.6, and 3.21.10 and below when using the proxygen server to handle HTTP2 requests...

JasPer Denial of Service Vulnerability (CNVD-2019-00977)

JasPer is a Canadian software developer Michael Adams developed a JPEG-2000 codec / decoder open source implementation . A security vulnerability exists in JasPer version 2.0.14. A remote attacker could exploit this vulnerability to cause a denial of service application hang...

Mini-XML Buffer Overflow Vulnerability

Mini-XML also known as mxml is a small XML parser developed using the C language . A buffer overflow vulnerability exists in the 'scanfile' function of the mxmldoc.c file in Mini-XML version 2.12. An attacker could exploit this vulnerability to cause a denial of service or code execution...

Chat Anywhere extension for Chrome cross-site scripting vulnerability

Chat Anywhere extension for Chrome is an online chat plugin for use in Google Chrome. A cross-site scripting vulnerability exists in the Chat Anywhere extension for Chrome version 2.4.0, which stems from the danmuWrapper DIV element in the chatbox-only\danmu.js file being out of the scope of the...

Denial of Service Vulnerability in Freeware Advanced Audio Deoder 2 (CNVD-2019-01362)

Freeware Advanced Audio Decoder 2 is advanced audio encoder. A denial of service vulnerability exists in Freeware Advanced Audio Decoder 2 FAAD2 in version v2.8.8, which can be exploited to cause a denial of service with the help of a specially crafted acc file...

Denial of Service Vulnerability in Freeware Advanced Audio Decoder 2

Freeware Advanced Audio Decoder 2 is advanced audio encoder. A denial of service vulnerability exists in Freeware Advanced Audio Decoder 2 FAAD2 in version v2.8.8, which can be exploited by attackers to cause a denial of service...

The vulnerability of the implementation of SMBv2 and SMBv3 protocols in Cisco Firepower System software allows a perpetrator to induce a service failure.

The vulnerability of the SMBv2 and SMBv3 protocols implemented by Cisco Firepower System arises from incorrect validation of the SMB message header. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2018-18960

An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack...

ALPINE-CVE-2018-20357

A NULL pointer dereference was discovered in sbrprocesschannel of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash...

Login Bypass Vulnerability in rejucms v2.1 Backend

rejucms is an online video web content management system CMS. A login bypass vulnerability exists in the backend of rejucms v2.1, which is caused by the failure of the program to authenticate login information, and can be exploited by an attacker to bypass login restrictions...

RDF4J Path Traversal Vulnerability

RDF4J is a Java-based open source framework for querying and analyzing RDF data . A path traversal vulnerability exists in RDF4J version 2.4.2, which can be exploited to overwrite arbitrary files with the help of a ZIP archive file...

PYSEC-2018-11

Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery CSRF vulnerability in API endpoint: /api/ that can result in Task metadata such as task name, id, parameter, etc. will be leake...

PT-2022-26810 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A memory leak was discovered in GPAC via the component gf list new at utils/list.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, consider restricting access to...

PT-2022-26811 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A memory leak was discovered in GPAC via the component gf odf new iod at odf/odf code.c. This issue affects the specified version of GPAC. Recommendations: For GPAC version...

WordPress WP Maintenance Mode Plugin Arbitrary PHP Code Execution Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. An arbitrary PHP code...

Siemens TIM 1531 IRC Authentication Vulnerability

The Siemens TIM 1531 IRC is a communication module from Siemens, Germany. A security vulnerability exists in the Siemens TIM 1531 IRC prior to version 2.0, which originates from the device failing to properly authenticate itself when connecting on port 102/tcp. An attacker could use this...

CVE-2018-5411

Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to add a note to an existing node. The stored information is displayed when a user requests information about the node. An attacker could insert Javascript into...

CVE-2018-2497

The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE AS SELECT...

SQL Injection Vulnerability in Laoban CMS V2.0 ty***.php Page

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A SQL injection vulnerability exists in the Laoban CMS V2.0 ty.php page. An attacker can exploit this vulnerability to obtain sensiti...

SQL Injection Vulnerability in Laoban CMS V2.0 to***.php Page

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A SQL injection vulnerability exists in the Laoban CMS V2.0 to.php page. An attacker can exploit this vulnerability to obtain sensiti...