27 matches found
Debian DSA-4541-1 : libapreq2 - security update
Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service against an application using the library application crash if an invalid nested 'multipart' body is processed. C Tenable Network Security...
[SECURITY] [DSA 4541-1] libapreq2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4541-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 04, 2019 https://www.debian.org/security/faq -...
CVE-2018-12412 TIBCO FTL Realm Server Vulnerable to CSRF Attacks
The realm server tibrealmserver component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery CSRF attacks. Affected releases are TIBCO...
CVE-2018-12412
The CVE-2018-12412 issue affects the realm server component (tibrealmserver) of TIBCO FTL for Community, Developer, and Enterprise Editions up to version 5.4.0. The vulnerability is a CSRF flaw that could allow an attacker to gain realm configuration rights and perform malicious operations on end...
CVE-2017-12412
ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...
CVE-2017-12412
CCN-lite contains an infinite recursion/stack overflow vulnerability in the ccn-lite-ccnb2xml component prior to version 2.0.0 when processing a crafted file. This affects CCN-lite up to 2.0.0; upgrading to 2.0.0 or later is the documented fix. The issue is reported across multiple sources (NVD/C...