gpmf-parser heap buffer overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap buffer overflow vulnerability exists in the 'GPMFValidate' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability ...

gpmf-parser heap overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause a...

gpmf-parser 'GPMF_Type' function heap buffer overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap buffer overflow vulnerability exists in the 'GPMFType' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to...

gpmf-parser buffer overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A buffer overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause ...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

Unspecified vulnerability in ikst

ikst is a software package. A security vulnerability exists in versions prior to ikst 1.1.2 that originates when the program downloads resources over the HTTP protocol. An attacker could use the vulnerability to modify or read downloaded resources and potentially execute code...

Apache Storm User Impersonation Vulnerability

Apache Storm is the United States Apache Apache Software Foundation, a set of Clojure Concurrent Programming Language developed using free open source distributed real-time computing system. A security vulnerability exists in Apache Storm versions 1.0.6 and earlier, 1.2.1 and earlier, and 1.1.2 a...

CVE-2017-16041

ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2018-0271

A vulnerability in the API gateway of the Cisco Digital Network Architecture DNA Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could...

WordPress Pinterest Feed plugin <=1.1.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by d4wner in WordPress Pinterest Feed plugin versions =1.1.1. Solution Update the WordPress Pinterest Feed plugin to the latest available version at least 1.1.2...

WordPress Simple Login Log plugin <=1.1.0 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found Neven Biruski Defencecode in WordPress Simple Login Log plugin versions =1.1.0 Solution Update the WordPress Simple Login Log plugin to the latest available version at least 1.1.2...

DEBIAN-CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

UBUNTU-CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard...

Kozea Radicale Authentication Error Vulnerability

Kozea Radicale, a project of the French company Kozea, is a free and open source CalDAV Calendar Synchronization Open Protocol and CardDAV Address Book Synchronization Open Protocol server solution. An authentication error vulnerability exists in Kozea Radicale versions prior to 1.1.2 and 2.x...

TP-Link TL-SG108E RC4 Coding Vulnerability

The TP-Link TL-SG108E is a Gigabit Ethernet switch. A security vulnerability exists in the TP-Link TL-SG108E version 1.0 using firmware version 1.1.2 Build 20141017 Rel.50749. An attacker can exploit the vulnerability to obtain information...

CVE-2017-8075

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...

CVE-2017-8076

On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...

CVE-2017-8074

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...

Foswiki 1.1.0 - 1.1.1 Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege escalation vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foswiki:foswiki"...