123 matches found
CVE-2021-1895
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...
CVE-2020-1895
creationtimestamp| type| source ---|---|--- 2020-09-24 10:23:52+00:00| published-proof-of-concept| Telegram/yQExRDM1VBaRNwFWvWuy0xF0TfeO9xaaeSO2ujzq9YsCxOxg 2020-09-24 11:21:35+00:00| published-proof-of-concept| https://t.me/cKure/2332 2020-09-24 12:23:34+00:00| seen| https://t.me/thehackernews/8...
Major Instagram App Bug Could've Given Hackers Remote Access to Your Phone
Ever wonder how hackers can hack your smartphone remotely? In a report shared with The Hacker News today, Check Point researchers disclosed details about a critical vulnerability in Instagram's Android app that could have allowed remote attackers to take control over a targeted device just by...
CVE-2020-1895
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128...
CVE-2020-1895
CVE-2020-1895 affects Instagram for Android prior to version 128.0.0.26.128, due to a large heap overflow when uploading specially crafted images. The issue originates in image parsing code (MozJPEG integration) that mishandles dimensions, enabling memory corruption. Public references describe re...
CVE-2020-1895
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128...
CVE-2013-1895
creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:39+00:00| seen| https://t.me/cveNotify/511...
CVE-2013-1895
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...
CVE-2013-1895
The CVE-2013-1895 entry concerns the py-bcrypt package for Python, specifically before version 0.3. The issue is a race/concurrency flaw: the module does not properly handle concurrent memory access, which allows attackers to bypass authentication by issuing multiple authentication attempts that ...
CVE-2013-1895
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...
Debian DLA-1895-1 : libmspack security update
JsHuang found an issue in libmspack, a library for Microsoft compression format. Opening a crafted chm file might result in a buffer overflow which might disclose confidential information. For Debian 8 'Jessie', this problem has been fixed in version 0.5-1+deb8u4. We recommend that you upgrade yo...
CVE-2019-1895
CVE-2019-1895 affects Cisco Enterprise NFV Infrastructure Software (NFVIS) via an authentication bypass in the VNC console. The root cause is insufficient authentication for establishing a VNC session, enabling an unauthenticated, remote attacker to intercept an admin VNC session request before l...
Security Bulletin: Multiple vulnerabilities in IBM InfoSphere Optim Workload Replay (CVE-2015-1894, CVE-2015-1895)
Summary Multiple vulnerabilities have been identified in IBM® InfoSphere® Optim™ Workload Replay, allowing an attacker to obtain information or gain access to data and operations that are restricted to authorized users. Vulnerability Details CVEID: CVE-2015-1894 DESCRIPTION: IBM Optim Workload...
CVE-2017-1895
CVE-2017-1895 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
CVE-2016-1895
NetApp Data ONTAP (clusters running before 8.2.5 or 8.3.x before 8.3.2P12) is affected by CVE-2016-1895. An authenticated remote attacker can cause a denial of service through unsafe handling of certain user input strings in the OS. The vulnerability’s root cause is related to input string proces...
Oracle: Security Advisory (ELSA-2009-1193)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201407-03
Gentoo Linux Local Security Checks GLSA 201407-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-1895
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...
CVE-2015-1895
CVE-2015-1895 affects IBM InfoSphere Optim Workload Replay. The IBM bulletin confirms a vulnerability where “2.x before 2.1.0.3 relies on client-side code to verify authorization,” enabling a remote attacker to bypass authorization checks and gain unauthorized access to user actions. Affected ver...