vulnerabilities and exploits

(subscribe to this query)

Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" to escape and write file to writeable directories.

Eyoucms Eyoucms 1.5.4

An issue exists in libjpeg up to and including 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an malicious user to cause Denial of Service.

An issue exists in libjpeg up to and including 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an malicious user to cause Denial of Service.

An issue exists in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.

An issue exists in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow.

Juniper Libslax

An issue exists in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

Gnu Ncurses Apple Mac Os X 10.12.6 Apple Macos 11.7 Apple Macos 13.0

An issue exists in sela up to and including 20200412. file::WavFile::writeToFile() in wav_file.c has a heap-based buffer overflow.

Sela Project Sela

An issue exists in sela up to and including 20200412. file::SelaFile::readFromFile() in sela_file.cpp has a heap-based buffer overflow.

Sela Project Sela

An issue exists in sela up to and including 20200412. file::WavFile::readFromFile() in wav_file.c has a heap-based buffer overflow.

Sela Project Sela

An issue exists in swftools up to and including 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage() located in VectorGraphicOutputDev.cc. It allows an malicious user to cause code Execution.

Swftools Swftools

« PREV 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook