401 matches found
FFmpeg Denial of Service Vulnerability (CNVD-2017-26316)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffamfgetfieldvalue' function in the libavformat/rtmppkt.c file in FFmpeg version 3.3.2. A remote attacker can exploit this vulnerability to cause a...
Design/Logic Flaw
The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
ALPINE-CVE-2017-11665
The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
CVE-2017-11665
CVE-2017-11665 affects FFmpeg 3.3.2, where the ff_amf_get_field_value function in libavformat/rtmppkt.c can be exploited by a crafted RTMP stream to trigger a denial of service (Segmentation Violation and application crash). Public references in connected documents confirm the vulnerability in FF...
CVE-2017-11665
The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
CVE-2016-2355
SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1...
Python Pillow Information Disclosure Vulnerability
Pillow is a compiled version of PIL Python Image Processing Library with some bug fixes developed by American software developer Alex Clark. A security vulnerability exists in versions of Pillow prior to 3.3.2. An attacker can exploit this vulnerability to obtain sensitive information...
Pillow Arbitrary Code Execution Vulnerability
Pillow is a compiled version of PIL Python Image Processing Library with some bug fixes developed by American software developer Alex Clark. An arbitrary code execution vulnerability exists in versions of Pillow prior to 3.3.2. A context-sensitive attacker could exploit this vulnerability by usin...
CVE-2016-9189
Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.mapbuffer in map.c component...
dotCMS < 3.3.2 SQLi Vulnerability
dotCMS is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotcms:dotcms"; if...
EyeLock Myris 3.3.2 SDK Service Unquoted Service Path Privilege Escalation
Summary myris® provides unparalleled security, is portable, lightweight and is as easy as looking in a mirror. Use myris to quickly and easily enroll users for EyeLock’s access control products or to grant users access to corporate domain environments within seconds—users never have to type their...
IBM TRIRIGA Application Platform Unauthorized Access Vulnerability
IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. An unauthorized access vulnerability exists in versions of IBM TRIRIGA Application Platform prior to 3.3.2, which could be exploited by an attacker to obtain sensiti...
VMware vRealize Log Insight Multiple Vulnerabilities (VMSA-2016-0008)
VMware vRealize Log Insight is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
DotCMS Workflow Screen SQL Injection Vulnerability
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in Workflow Screen in DotCMS versions prior to 3.3.2. A remote attacker ca...
Symantec Encryption Management Server (SEMS) Local Elevation of Privilege Vulnerability
Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12. This vulnerability allows a local attacker to gain root access by modifying a batch...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the qt package up to version 3.3.2 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Fedora 21 : qt-creator-3.3.2-2.fc21 (2015-3574)
Add SSH host key verification to built-in SSH client. Update to version 3.3.2, see https://qt.gitorious.org/qt-creator/qt-creator/raw/2fb9c3c7abc93a9237e 72972ee222b2a2628007e:dist/changes-3.3.2 for details. Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2014-6409
Cross-site request forgery CSRF vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password parameters to /admin/users/update...
