[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

 
 
 
Paid content will be excluded from the download.

Filter
Matches : 27003 Download | Alert*

The host is installed with Google Chrome before 56.0.2924.76 and is prone to an insufficient data validation vulnerability. A flaw is present in the application, which fails to handle unspecified vectors. Successful exploitation allows attackers to have unspecified impact.

The host is installed with PostgreSQL 10.x before 10.9 and 11.x before 11.4 and is prone to an stack-based buffer overflow vulnerability. A flaw is present in the application which fails to handle crafted passwords. Successful exploitation allows attackers to execute arbitrary code as the PostgreSQL operating system account.

The host is installed with OpenSSL 1.0.2 through 1.0.2s or 1.1.1 through 1.1.1c or 1.1.0 through 1.1.0k and is prone to an improper certificate validation vulnerability. A flaw is present in the directory tree where it can find a configuration file as well as certificates used for verification in TLS. Successful exploitation could allow attackers to modify OpenSSL's default configuration, insert C ...

The host is installed with Oracle WebLogic Server component in Oracle WebLogic Server through 10.3.6.0, 12.1.3.0, 12.2.1.3 or 12.2.1.4 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to properly handle Console (Apache Commons Beanutils). Successful exploitation can cause unspecified impact.

The host is installed with FasterXML jackson-databind 2.8.0 before 2.8.11.5 or 2.9.0 before 2.9.10 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to handle issues in polymorphic typing. Successful exploitation could allow attackers to cause an unspecified impact.

The host is installed with Oracle WebLogic Server component in Oracle WebLogic Server through 12.2.1.3 or 12.2.1.4 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to properly handle Core Components (Connect2id Nimbus JOSE+JWT). Successful exploitation can cause unspecified impact.

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.

The host is installed with KeePass 2.4.1 and is prone to a CSV injection vulnerability. A flaw is present in the application which fails to properly handle an issue in the title field of a CSV export. Successful exploitation allows attackers to force other user to execute code in his machine.

The host is installed with SpringSource Spring Framework 5.0.x before 5.0.16, 5.1.x before 5.1.13, or 5.2.x before 5.2.3 and is prone to a reflected file download vulnerability. A flaw is present in the application, which fails to handle when it sets a "Content-Disposition" header in the response. Successful exploitation allows attackers to allow download of code without integrity check.


Pages:      Start    1619    1620    1621    1622    1623    1624    1625    1626    1627    1628    1629    1630    1631    1632    ..   2700

© SecPod Technologies