Results
7,554 of 18,349· Page 88/152ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is no
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API,
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address t
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi
In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occu
Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.
A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c
A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c
A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file o
An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly ve
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vu
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker
An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialo
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory.
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully e
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_prev
Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.p
A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on t
Test your stack for 2020issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.