349 matches found
DEBIAN-CVE-2020-12872
yawsconfig.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0...
CVE-2020-9294
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...
odata4j sql injection vulnerability
odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...
odata4j sql injection vulnerability (CNVD-2020-24024)
odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...
CVE-2020-9520
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled...
VideoLAN VLC Media Player Cross-Site Scripting Vulnerability (CNVD-2020-08120)
VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A cross-site...
samurai heap buffer overflow vulnerability
samurai is a ninja-compatible build tool written in C. It can be used in a variety of ways, including. A buffer overflow vulnerability exists in the 'canonpath' function of the util.c file in samurai version 0.7. The vulnerability stems from a networked system or product performing operations in...
DEBIAN-CVE-2019-16095
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c...
PrestaShop ICOMMKT connector SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods , short message alerts and product image zoom and other features.ICOMMKT connector is used in one of the ICOMMK connector . A SQL injection vulnerability...
Adive Framework Cross-Site Scripting Vulnerability (CNVD-2020-17024)
Adive Framework is a PHP-based MySQL database management framework . A cross-site scripting vulnerability exists in Adive Framework 2.0.7 and earlier versions, which stems from the lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...
UBUNTU-CVE-2019-5439
A Buffer Overflow in VLC Media Player 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit...
GNU LibreDWG Null Pointer Backreference Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the '.spec' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
GNU LibreDWG null pointer back-reference vulnerability (CNVD-2019-12558)
GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the 'dwgdxfLTYPE' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12557)
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfBLOCKCONTROL' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose...
GNU LibreDWG Heap Buffer Overflow Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
GHSA-2MVM-66Q7-M256 Downloads Resources over HTTP in selenium-download
Affected versions of selenium-download insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...
Telegram Web and Telegram for Android Server-Side Request Forgery Vulnerability
Telegram for Android is an instant messaging application based on the Android platform.Telegram Web is its web version. A server-side request forgery vulnerability exists in the 'secret chat' feature in Telegram version 4.9.1 and Telegram Web version 0.7.0 for the Android-based platform. No...
WordPress WP Maintenance Mode Plugin Arbitrary PHP Code Execution Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. An arbitrary PHP code...
ImageMagick Denial of Service Vulnerability (CNVD-2018-12761)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadDCMImage' function of the coders/dcm.c file in the ImageMagick...
