DEBIAN-CVE-2017-12597

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...

OpenCV Denial of Service Vulnerability (CNVD-2017-24173)

OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'FillColorRow8' function in the utils.cpp file in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds...

CVE-2015-3297

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests...

CVE-2015-3297: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests...

PT-2017-3247

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 Description The issue is related to insufficient validation of untrusted input in Blink's mailto: handling, allowing a remote attacker to perform command injection via a crafted HTML page. This is...

CVE-2017-9331

The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter...

PT-2017-18847

Name of the Vulnerable Software and Affected Versions Telaxus EPESI versions 1.8.2 and earlier Description The issue concerns a Stored Cross-site Scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description...

RHEL 6 : libtirpc (RHSA-2017:1268)

An update for libtirpc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS Update for libtirpc CESA-2017:1268 centos6

Check the version of libtirpc SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882721";...

PT-2017-10549

Name of the Vulnerable Software and Affected Versions Config-Model versions prior to 2.102 Description The gen class pod implementation in lib/Config/Model/Utils/GenClassPod.pm has a dangerous "use lib" line. This allows remote attackers to have an unspecified impact via a crafted Debian package...

CVE-2017-0373: Improper Input Validation

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

RHEL 7 : libtirpc (RHSA-2017:1263)

An update for libtirpc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Timing Attack

Jetty Utils is vulnerable to timing attacks. The library is vulnerable because it does not compare passwords, message digests and credentials in constant-time. This allows malicious users to use the timing of the request to progressively identify a valid passwords, message digests and credentials...

Privilege Escalation Through Authentication Bypass

keycloak-auth-utils is vulnerable to privilege escalation attacks. The vulnerability is possible because it does not properly perform the token validation in validateGrant. Therefore, attackers can bypass the authentication with invalid tokens and perform unauthorized access to the restricted...

[SECURITY] Fedora 26 Update: coreutils-8.27-5.fc26

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

Command Line Shell Injection

plexus-utils is vulnerable to command line shell injection. The library does not correctly quote the contents of double-quoted strings, allowing a malicious user to inject and execute arbitrary shell code...

Out-of-Bounds Write

FFmpeg is vulnerable to an out-of-bounds write. A malicious user can use this to cause a system crash or to overwrite variables currently in the buffer. This can be done using the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in...

CVE-2017-7865

FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in libavcodec/utils.c...

Heap overflow

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

CVE-2015-8026

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...