367 matches found
CVE-2016-10168
Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image...
SonicDICOM PACS 2.3.2 - Privilege Escalation
SonicDICOM PACS 2.3.2 - Privilege Escalation SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities of DICOM Serv...
CVE-2016-10168
Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image...
Harvest: Unauthorised read Access to Expense Receipt of any user in the company(Vertical Privilege escalation)
Hi Team, Description : In Timesheet you have option for submitting your expense for the projects you are assigned. But Only Admin can view other user's Expenses and related receipts. But there is a request which gives a full size of expense receipt attached to the expenses. This request is...
DEBIAN-CVE-2016-5687
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read...
WordPress Vertical Gallery plugin arbitrary file upload vulnerability
No description provided by source...
Harvest: PM can delete the company logo image (Vertical Privilege Escalation )
Hi Team, Description : Only Admin can Delete the Company Logo image In company account on harvestapp.But the Deleting Logo HTTP request doesn't validate the Access of the user properly and a Project managerLimited access to Company Settings can Delete the Logo image of the company. Vulnerable HTT...
WordPress Vertical Gallery Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Vertical Gallery Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Vertical-Life Climbing - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Vertical-Life Climbing published at the 'play' market has multiple vulnerabilities...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2016-00906)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 44.0, which arises from the program storing cookies with names that contain vertical tabs. The vulnerability can be exploite...
CVE-2016-1939
Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208...
CVE-2016-1939
CVE-2016-1939 affects Mozilla Firefox before 44.0, where cookies with vertical tab characters can leak sensitive information via HTTP Cookie headers. This issue is noted as stemming from an incomplete fix for CVE-2015-7208. The vulnerability is limited to cookie-name handling and can lead to info...
UBUNTU-CVE-2016-1939
Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2015-08316)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 43.0, which is caused by the program incorrectly storing a cookie with the vertical tab '\v', and can be exploited by a remot...
Information disclosure
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
CVE-2015-7208
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers...
Firefox allows for control characters to be set in cookies — Mozilla
Security researcher musicDespiteEverything reported an issue when ASCII code 11 for vertical tab is stored in a cookie in violation of RFC6265. This may result in incorrect cookie handling by servers, resulting in the potential ability to set cookie values and read cookie data from users in conce...