|
246751
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
|
CWE-79
Cross-site Scripting
|
CVE-2018-14955
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246752
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14954
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246753
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14953
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246754
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14952
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246755
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14951
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246756
|
6.1 |
MEDIUM
Network
|
squirrelmail
|
squirrelmail
|
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14950
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246757
|
7.8 |
HIGH
Local
|
sound_project
|
sound
|
An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operator new [] versus operator delete).
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14948
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246758
|
8.8 |
HIGH
Network
|
flowpaper
|
pdf2json
|
An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete).
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14947
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246759
|
8.8 |
HIGH
Network
|
flowpaper
|
pdf2json
|
An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete).
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14946
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246760
|
7.8 |
HIGH
Local
|
jpeg_encoder_project
|
jpeg_encoder
|
An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFromBMP in jpeg_encoder.cpp.
|
CWE-787
Out-of-bounds Write
|
CVE-2018-14945
|
2024-11-21 12:50 |
2018-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|