40 matches found
UBUNTU-CVE-2019-16225
An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
CVE-2019-16224
An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
CVE-2019-16225
The CVE-2019-16225 entry concerns py-lmdb (version 0.97). Affects the mdb_page_touch path where certain mp_flags values prevent mc->mc_pg[mc->top] from being set up correctly, causing an invalid write operation when a data.mdb file is accessed. Public details describe the root cause and the...
CVE-2019-16225
An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
CVE-2019-16226
An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
CVE-2019-16228
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
PT-2019-6373
Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description The issue is related to the mdb node del function in the py-lmdb module, which does not properly validate a memmove operation when encountering an unexpected node-mn hi value. This can lead to an invalid write...
PT-2019-14587
Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description An issue was discovered in py-lmdb where for certain values of md flags, the mdb node add function does not properly set up a memcpy destination, leading to an invalid write operation. This issue occurs when...
br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0 <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (=0.97-incubator)
org.apache.sanselan:sanselan MAVEN version =0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha,...
br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0 <=5.5.0) +84 more potentially affected by CVE-2018-17202 via org.apache.sanselan:sanselan (=0.97-incubator)
org.apache.sanselan:sanselan MAVEN version =0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha,...
CVE-2018-17201
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...
Exponent CMS 0.97 File Upload
File upload vulnerability in Exponent CMS uploadfileuploadcontrol.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Mandriva Update for clamav MDVA-2011:007 (clamav)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
PT-2011-2807 · Cisco +1 · Clamav +1
Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.97 Description: A double free vulnerability exists in the vba read project strings function in vba extract.c in libclamav. This issue might allow remote attackers to execute arbitrary code via crafted Visual Basic f...
ClamAV < 0.97 Double Free Memory Corruption Vulnerability
ClamAV is prone to a double-free memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...
Exponent CMS 0.97 - Multiple Vulnerabilities
Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...
net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities
No description provided by source. =cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID:...
PT-2005-2836 · Lutelwall · Lutelwall
Name of the Vulnerable Software and Affected Versions: LutelWall versions 0.97 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. This is a result of a symlink attack vulnerability...
[Full-disclosure] LutelWall <= 0.97 insecure temporary file creation
LutelWall insecure temporary file creation Vendor: http://firewall.lutel.pl/index.php Advisory: http://www.zataz.net/adviso/lutelwall-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...
CVE-2001-0769
The CVE-2001-0769 entries describe a memory leak in GuildFTPd Server 0.97 that can be triggered by a remote attacker sending a request containing a null character, causing a denial of service. The connected documents provide the vulnerability’s existence and impact but do not specify exploit deta...