4298 matches found
AZL-45159 CVE-2019-1010266 affecting package js-jquery 3.5.0-4
lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...
CVE-2019-0329
SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
Tenda W20E V15.11.0.6_CN has a command execution vulnerability (CNVD-2019-22867)
Shenzhen Jixiang Tengda Technology Co., Ltd. is one of the first pioneers in the field of wireless network in China. Tenda W20E V15.11.0.6CN suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...
CVE-2019-13305
creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:07+00:00| seen| https://t.me/cveNotify/227...
CVE-2018-11427
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator...
CVE-2019-6624
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service DoS...
CVE-2019-7106
creationtimestamp| type| source ---|---|--- 2019-05-23 16:48:28+00:00| seen| https://t.me/cvemitreorg/204...
CVE-2016-10746
creationtimestamp| type| source ---|---|--- 2019-04-18 20:29:04+00:00| seen| https://t.me/cibsecurity/3810...
Exploit for Use After Free in Mozilla Firefox
CVE-2018-18500 PoC for CVE-2018-18500...
CVE-2019-1003092
A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpldoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
Nconvert suffers from a tiff file parsing heap overflow vulnerability ( CNVD-2019-12113)
XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. Nconvert suffers from a tiff file parsing heap overflow vulnerability and a heap out-of-bounds write vulnerability when parsing tiff files, which allows an attacker to construct a...
CVE-2018-11948
creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:12+00:00| seen| https://t.me/cibsecurity/2715...
PHP has unspecified vulnerabilities (CNVD-2019-42545)
PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A...
VulnCheck KEV: CVE-2022-45045
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...
Security Advisory - Memory Double Free Vulnerability in Image Processing Module of Some Huawei Smart Phones
The image processing module of some Huawei smart phones has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash. Vulnerability ID: HWPSIRT-2018-110...
CVE-2018-6111
An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page...
CVE-2018-0257
creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia...
CVE-2018-0228
creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia...
DEBIAN-CVE-2018-1160
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsiopensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution...