Archive
January 2018
Vulnerabilities first published in this month (UTC), newest first.
1,275 results · Feed
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the…
-
Unscored —
In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/…
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the…
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-syst…
-
Unscored —
The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php.
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-syst…
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-syst…
-
Unscored —
In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStrea…
-
Unscored —
The ImageInject plugin 1.15 for WordPress has XSS via the flickr_appid parameter to wp-admin/options-general.php.
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the…
-
Unscored —
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the…
-
Unscored —
The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Medium 5.5
Out-of-bounds Write in OpenCV.
In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.
-
Low 3.3
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
High 7.8
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
High 7.8
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Medium 5.5
Reachable Assertion in OpenCV.
In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
-
Unscored —
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…
-
Unscored —
SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands.
-
Unscored —
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid …
-
Unscored —
Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remo…
-
Unscored —
Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDea…
-
Unscored —
The Installer in Whale allows DLL hijacking.
-
Unscored —CVE-2014-10069 Public exploit
Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which…
-
Unscored —
When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
-
Unscored —
When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
-
Unscored —
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
-
Unscored —
In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing ce…
-
Unscored —
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function…
-
Unscored —
The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that trigg…
-
Unscored —
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inje…
-
Unscored —
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, r…
-
Unscored —
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.