1121 matches found
PT-2019-18099 · Gnu +3 · Gnu Recutils +3
Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: An issue was discovered in GNU Recutils. There is a NULL pointer dereference in the function rec fex size in the file rec-fex.c of librec.a. Recommendations: For GNU Recutils version 1.8, consider avoidin...
PT-2019-18100 · Gnu +3 · Gnu Recutils +3
Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: A memory leak was found in the rec aggregate reg new function in rec-aggregate.c within librec.a. Recommendations: For GNU Recutils version 1.8, consider updating to a newer version that addresses the...
PT-2019-18101 · Gnu +3 · Gnu Recutils +3
Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: A memory leak issue was found in the rec buf new function in rec-buf.c when called from rec parse rset in rec-parser.c within librec.a. Recommendations: For GNU Recutils version 1.8, at the moment, there ...
CVE-2018-20615
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-check...
GHSA-3448-VFVV-XP9G Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika...
DEBIAN-CVE-2018-20431
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...
CVE-2018-20431
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...
GNU Libextractor Denial of Service Vulnerability (CNVD-2019-03528)
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A null pointer back-reference vulnerability exists in the 'processmetadata' function in the plugins/ole2extractor.c file in GNU Libextractor 1.8 and earlier. An attacker could exploit this...
Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal Vulnerabilities
Transcend Wi-Fi SD Card 16GB with firmware 1.8 suffers from cross site request forgery and directory traversal vulnerabilities. There are Directory Traversal and Cross-Site Request Forgery vulnerabilities in Transcend Wi-Fi SD Card. ------------------------- Affected products:...
Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal
Hello list! There are Directory Traversal and Cross-Site Request Forgery vulnerabilities in Transcend Wi-Fi SD Card. ------------------------- Affected products: ------------------------- Vulnerable is the next model: Transcend Wi-Fi SD Card 16 GB, Firmware v.1.8. This model with other firmware...
Google Cardboard Information Disclosure Vulnerability
Google Cardboard application is a VR application from Google USA. A security vulnerability exists in version 1.8 of the Google Cardboard application for the Android platform and version 1.2 for the iOS platform. An attacker can exploit the vulnerability to obtain sensitive information...
UBUNTU-CVE-2018-16949
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit length field to 4 GB. An unauthenticated attacker could send, or claim to send, large input values...
[SECURITY] Fedora 28 Update: bouncycastle-1.60-1.fc28
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8...
zutils zcat buffer overflow vulnerability
zutils is a package of zip file handling utilities. The program supports compression/decompression, compressed file comparison and compressed file integrity checking. zcat is one of the decompression utilities. A buffer overflow vulnerability exists in zcat in versions prior to zutils 1.8-pre2. A...
DEBIAN-CVE-2018-1000637
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...
CVE-2018-1000637
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...
UBUNTU-CVE-2018-1000637
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...
Security Bulletin: Vulnerability in IBM Java Runtime affect Rational Host On-Demand (CVE-2016-0603)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 1.6 , 1.7 and 1.8 that is used by Rational Host On Demand .JRE installation executables on the Windows platform are affected by this vulnerability. Vulnerability Details CVE-ID: CVE-2016-0603 Descriptio...
