Show filters
33 Total Results
Displaying 1-10 of 33
Sort by:
Attacker Value
Unknown
CVE-2023-23063
Disclosure Date: February 22, 2023 (last updated March 08, 2024)
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.
0
Attacker Value
Unknown
CVE-2019-5457
Disclosure Date: July 30, 2019 (last updated November 27, 2024)
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
0
Attacker Value
Unknown
CVE-2017-5878
Disclosure Date: June 08, 2017 (last updated November 26, 2024)
The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data.
0
Attacker Value
Unknown
CVE-2015-8540
Disclosure Date: April 14, 2016 (last updated November 08, 2023)
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
0
Attacker Value
Unknown
CVE-2015-8327
Disclosure Date: December 17, 2015 (last updated October 05, 2023)
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
0
Attacker Value
Unknown
CVE-2015-7981
Disclosure Date: November 24, 2015 (last updated October 05, 2023)
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
0
Attacker Value
Unknown
CVE-2014-3580
Disclosure Date: December 18, 2014 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
0
Attacker Value
Unknown
CVE-2014-8108
Disclosure Date: December 18, 2014 (last updated October 05, 2023)
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
0
Attacker Value
Unknown
CVE-2014-3528
Disclosure Date: August 19, 2014 (last updated October 05, 2023)
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
0
Attacker Value
Unknown
CVE-2014-1501
Disclosure Date: March 19, 2014 (last updated October 05, 2023)
Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.
0
