Denial Of Service (DoS)

jasper is vulnerable to denial of service. A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Denial Of Service (DoS) Or Remote Code Execution (RCE)

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

Memory Corruption

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service. A NULL pointer dereference in JP2 encoder allows an attacker to crash the process via a malicious JPEG 2000 image...

The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 2000 Standard and Premium Edition

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN 2000 Standard and Premium Edition The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The dates and milestones...

CVE-2018-2000

CVE-2018-2000 concerns cross-site request forgery in IBM Business Automation Workflow 18.0.0.0–18.0.0.1 (and related BPM components). The IBM Security Bulletin and CNVD/CVE records describe an issue where an attacker could induce unauthorized actions by a trusted user’s session. The IBM bulletin ...

Fedora Update for ntfs-3g FEDORA-2019-c1e6c6edd9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

CVE-2019-1614

Cisco NX-OS NX-API Command Injection (CVE-2019-1614) affects multiple Nexus/NX-OS platforms. The root cause is incorrect input validation in the NX-API subsystem, allowing an authenticated, remote attacker to send malicious HTTP/HTTPS requests to the management interface and execute arbitrary com...

CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

CVE-2019-1611

The CVE-2019-1611 issue is a vulnerability in the Cisco NX-OS FXOS CLI where insufficient validation of CLI arguments enables an authenticated, local attacker with valid admin credentials to execute arbitrary commands on the device with elevated privileges. The concern affects multiple Cisco plat...

CVE-2019-1611 Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)

A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...

Command injection

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

Input validation

A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...

CVE-2019-1614

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

Debian DSA-4405-1 : openjpeg2 - security update

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution. - CVE-2017-17480 Write stack-based buffer overflow in the jp3d and jpwl codecs can result in a denial of service or...

[SECURITY] [DSA 4405-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4405-1 [email protected] https://www.debian.org/security/ Luciano Bello March 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4405-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4405-1 [email protected] https://www.debian.org/security/ Luciano Bello March 10, 2019 https://www.debian.org/security/faq -...