CVE-2019-13484

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...

CVE-2019-13484

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...

CVE-2019-13484

Xymon ≤ 4.3.28 contains a buffer overflow in the status-log viewer CGI caused by expansion in appfeed.c. This CVE-2019-13484 entry is documented across multiple sources (NVD, OSV, Debian/Ubuntu trackers, Nessus/NASL plugins, etc.), consistently stating the flaw exists in the status-log viewer com...

CVE-2019-13485

CVE-2019-13485 affects Xymon up to version 4.3.28. The history viewer component (history.c) is vulnerable to a stack-based buffer overflow triggered by a long hostname or service parameter. The vulnerability is documented with a high/critical impact profile (CVSS v3 base score 9.8, network access...

CVE-2019-13485

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...

CVE-2019-13485

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...

CVE-2019-13486

CVE-2019-13486 affects Xymon up to version 4.3.28, with a stack-based buffer overflow in the status-log viewer (svcstatus.c) caused by expansion. Multiple open‑source/vuln databases (NVD, OSV, CNVD, Debian/CVE trackers, OSVUbuntu/OSVDebian) corroborate the issue as a vulnerability in the status-l...

CVE-2019-13486

In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c...

Scientific Linux Security Update : freerdp and vinagre on SL7.x x86_64 (20190806)

The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop. The following packages have been upgraded to a later upstream version: freerdp 2.0.0. Security Fixes : - freerdp: out of bounds read in drdynvcprocesscapabilityrequest CVE-2018-1000852 C Tenable Network Security...

Scientific Linux Security Update : spice-gtk on SL7.x x86_64 (20190806)

The libgovirt packages contain a library that allows applications to use the oVirt Representational State Transfer REST API to list virtual machines VMs managed by an oVirt instance. The library is also used to get the connection parameters needed to establish a connection to the VMs using Simple...

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

BMP image processing binary vulnerability in Windshield Viewer

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Binary Vulnerability in Windshade Viewer FyPicViewer.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

WordPress error-log-viewer plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. error-log-viewer is an error log viewer plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2017-18562

The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...

Cross site scripting

The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...

CVE-2017-18562

CVE-2017-18562 affects the WordPress Error Log Viewer plugin by BestWebSoft prior to version 1.0.6. The connected documents confirm multiple XSS flaws in this plugin, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing session data or acti...

CVE-2017-18562

The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...

Photo gallery suffers from denial of service vulnerability (CNVD-2019-30301)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

spice-gtk security and bug fix update

libgovirt 0.3.4-2 - Parse XML nodes automatically Related: rhbz1427467 - Set detailed error message for async call Related: rhbz1427467 spice-gtk 0.35-4 - Fix bad channel-reset on usbredir Resolves: rhbz1625550 0.35-3 - Fix insufficient encoding checks for LZ Resolves: rhbz1598652 spice-vdagent...