CVE-2017-15789

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."...

CVE-2017-15779

CVE-2017-15779 affects XnView Classic for Windows 2.43. A buffer overflow in the .dwg file handling can allow arbitrary code execution or a denial of service via a specially crafted .dwg, related to memory corruption around Data from Faulting Address controlling subsequent Write Address at CADIma...

CVE-2017-15780

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."...

CVE-2017-15774

CVE-2017-15774 affects XnView Classic for Windows version 2.43. A vulnerability exists in handling a crafted .dwg file that can lead to arbitrary code execution or denial of service . The root cause is described as “Data from Faulting Address controls Code Flow starting at CADImage+0x000000000022...

Dnsmasq DCHP租期多个远程拒绝服务漏洞

BUGTRAQ ID: 31017 CVE ID：CVE-2008-3350 CNCVE ID：CNCVE-20083350 Dnsmasq是一款轻量级的DNS服务程序。 Dnsmasq处理租期存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 -当未知客户端尝试刷新DHCP租期时存在问题可导致应用程序崩溃。 -当一个没有租期的主机处理DHCPINFORM时可导致应用程序崩溃。 Gentoo net-dns/dnsmasq 2.43 Dnsmasq Dnsmasq 2.43 升级到最新版本：...

GLSA-200809-02 : dnsmasq: Denial of Service and DNS spoofing

The remote host is affected by the vulnerability described in GLSA-200809-02 dnsmasq: Denial of Service and DNS spoofing Dan Kaminsky of IOActive reported that dnsmasq does not randomize UDP source ports when forwarding DNS queries to a recursing DNS server CVE-2008-1447. Carlos Carvalho reported...

CVE-2008-3350

dnsmasq 2.43 allows remote attackers to cause a denial of service daemon crash by 1 sending a DHCPINFORM while lacking a DHCP lease, or 2 attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214...

DEBIAN-CVE-2008-3350

dnsmasq 2.43 allows remote attackers to cause a denial of service daemon crash by 1 sending a DHCPINFORM while lacking a DHCP lease, or 2 attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214...

CVE-2008-3350

dnsmasq 2.43 allows remote attackers to cause a denial of service daemon crash by 1 sending a DHCPINFORM while lacking a DHCP lease, or 2 attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214...

CVE-2008-3350

CVE-2008-3350 affects dnsmasq up to version 2.43, allowing remote DoS via (1) a DHCPINFORM without an active lease or (2) renewing a non-existent lease for an invalid subnet (unknown client); remediation noted in connected advisories to upgrade to at least dnsmasq-2.45.

CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to the default URI associated with a directory, as demonstrated by a the root directory and b the...

CVE-2007-5213

The CVE-2007-5213 entry describes CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The affected component is the web management interface, where cross-site requests can perform administrator actions. Demonstrated vectors include (1) changing the SMTP serve...

CVE-2007-5212

Multiple cross-site scripting XSS vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via 1 parameters associated with saved settings, as demonstrated by the confSMTPMailServer1 parameter to ServerManager.srv...