CVE-2015-9099

The lameinitparams function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file with a negative sample rate...

CVE-2015-9100

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

CVE-2015-9101

CVE-2015-9101 affects LAME vulnerable in fill_buffer_resample (libmp3lame/util.c); a crafted audio file can trigger a heap-based buffer over-read and application crash (DoS). Patches exist in newer LAME releases (e.g., 3.100 per openSUSE/SUSE advisories); no exploitation details are provided in t...

CVE-2015-9099

CVE-2015-9099 affects LAME 3.99.5 (libmp3lame.a) with the vulnerable lame_init_params in lame.c. A crafted audio file with a negative sample rate can cause an invalid read and application crash, enabling a denial of service. Connected advisories indicate vendor-specific patches: Fedora/Fedora-lin...

CVE-2015-9099

The lameinitparams function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file with a negative sample rate...

CVE-2015-9100

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

CVE-2015-9100

CVE-2015-9100 affects LAME 3.99.5; the vulnerable code is fill_buffer_resample in libmp3lame/util.c, where a crafted audio file can cause a NULL pointer dereference, leading to application crash (denial of service). No exploit specifics or patch details are provided in the connected documents.

[SECURITY] [DSA 3897-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3897-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3897-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3897-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2017 https://www.debian.org/security/faq -...

CVE-2015-9098

CVE-2015-9098 affects Redgate SQL Monitor versions prior to 3.10 and 4.x prior to 4.2. A remote unauthenticated attacker can gain access to the Base Monitor and execute arbitrary SQL commands on any monitored Microsoft SQL Server machines; if the Base Monitor connects using an account with SQL ad...

CVE-2015-1207

creationtimestamp| type| source ---|---|--- 2017-06-21 03:14:32+00:00| seen| https://t.me/HackingPublicoficial/138...

SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1613-1) (Stack Clash)

The SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security fixes. The following security bugs were fixed : - CVE-2017-1000364: The default stack guard page was too small and could be 'jumped over' by userland programs using more than one page of stack in functions and so lead...

CVE-2015-3254

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...

CVE-2015-3254

Apache Thrift client libraries before 0.9.3 are affected by CVE-2015-3254, which could allow a remote authenticated user to trigger a denial of service via infinite recursion in the skip function. Impact is a partial denial of service (availability affected) with network access and no confidentia...

CVE-2015-9056

Kibana is the affected product in multiple sources (NVD, RH, OpenVAS, CNVD) for CVE-2015-9056. The vulnerability is a Cross-Site Scripting (XSS) flaw present in Kibana versions prior to 4.1.3 and 4.2.1. The provided documents consistently describe an XSS issue but do not specify the underlying ro...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2017-1112)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2017-1095)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to...

EulerOS 2.0 SP1 : jasper (EulerOS-SA-2017-1094)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to...

[SECURITY] [DLA 987-1] request-tracker4 security update

Package : request-tracker4 Version : 4.0.7-5+deb7u5 CVE ID : CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the...

CVE-2015-7732

CVE-2015-7732 affects Avira Mobile Security for iOS prior to 1.5.11. The vulnerability is an information disclosure where the app sends sensitive login information in cleartext, potentially exposing credentials. Multiple connected sources corroborate the issue and identify the impacted version ra...