2970 matches found
Flaw in Google Bug Tracker Exposed Reports About Unpatched Vulnerabilities
Google’s Issue Tracker, also known internally as the “Buganizer,” contained until recently a vulnerability that would allow an external party access to any unpatched bug listed and described in the database. Alex Birsan, a software developer and hobbyist bug-hunter, collected more than $15,000 in...
Microsoft Windows 10 Creators Update 32-bit Ring-0 Code Execution Exploit
Microsoft Windows 10 Creators Update suffers from a 32-bit execution of ring-0 code from NULL page via NtQuerySystemInformation class 185, Warbird functionality. Windows 10 Creators Update 32-bit execution of ring-0 code from NULL page via NtQuerySystemInformation class 185, Warbird functionality...
EyesOfNetwork web interface cross-site scripting vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A cross-site scripting...
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
Microsoft on Tuesday's Patch Tuesday on the breath announced a 62 bug. the bug of the patch, which contains a has been applied to the major Office 0-day exploits flaws in the bug, this is by memory of the destruction occasioned by the long-distance code to perform vulnerability flaws bug（...
openSUSE Security Update : mpg123 (openSUSE-2017-1139)
This update for mpg123 to version 1.25.7 fixes the following issues : - CVE-2017-10683: Improvement over previous fix for xrpnt overflow problems boo1046766 The following changes are also included in version 1.25.7 : - Do not play with cursor and inverse video for progress bar when TERM=dumb - Fi...
CVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...
CVE-2017-14625
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeloutputcreate in coders/sixel.c...
CVE-2017-14531
ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c...
CVE-2017-14532
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c...
Debian DLA-1125-1 : botan1.10 security update
CVE-2017-14737 Fix of cache-based side channel attack, which could recover information about RSA secret keys. For Debian 7 'Wheezy', these problems have been fixed in version 1.10.5-1+deb7u4. We recommend that you upgrade your botan1.10 packages. NOTE: Tenable Network Security has extracted the...
ALPINE-CVE-2017-1000254
libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in anonymous or not, it asks the server for the current directory with the PWD command. The server then responds with a 257 response containing the path, inside double...
CVE-2017-15015
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c...
CVE-2017-15017
CVE-2017-15017: ImageMagick 7.0.7-0 Q16 is affected by a NULL pointer dereference in ReadOneMNGImage (coders/png.c). The connected Nessus entry notes a lack of vendor patch for this unpatched version (ImageMagick 7.0.7-0 Q16). No further technical details or remediation are provided in the docume...
CVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...
CVE-2017-15015
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c...
Debian DSA-3988-1 : libidn2-0 - security update
An integer overflow vulnerability was discovered in decodedigit in libidn2-0, the GNU library for Internationalized Domain Names IDNs, allowing a remote attacker to cause a denial of service against an application using the library application crash. %NASLMINLEVEL 70300 C Tenable Network Security...
[SECURITY] [DSA 3988-1] libidn2-0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3988-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 30, 2017 https://www.debian.org/security/faq -...
DSA-3988-1 libidn2-0 - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3988-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
