SUSE SLED12 Security Update : libraw (SUSE-SU-2018:3343-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-5800: Fixed heap-based buffer overflow in LibRaw::kodakycbcrloadraw function bsc1084691. CVE-2018-5801: Fixed NULL pointer dereference in LibRaw::unpack function bsc1084690. CVE-2018-5802: Fixed out-of-bounds rea...

edificio-aliados-porto-habinedita-5800.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629225 Description| Value ---|--- Affected Website:| edificio-aliados-porto-habinedita-5800.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripti...

CVE-2018-5800

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

FreeBSD : libraw -- multiple DoS vulnerabilities (6f0b0cbf-1274-11e8-8b5b-4ccc6adda413)

Secunia Research reports : CVE-2018-5800: An off-by-one error within the 'LibRaw::kodakycbcrloadraw' function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the 'LibRaw::unpack' function...

CVE-2017-5800

CVE-2017-5800 describes a remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics v3.0 . The issue stems from inadequate input filtering, enabling an attacker to inject and execute arbitrary HTML/JavaScript in a victim’s browser. Impact noted includes the potential thef...

CVE-2017-15349

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...

LibRaw 0.18.7 Denial Of Service Vulnerability

Exploit for linux platform in category dos / poc LibRaw 0.18.7 Denial Of Service Vulnerability ====================================================================== 1 Affected Software LibRaw versions prior to 0.18.7. ====================================================================== 2...

CVE-2017-8157

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information...

CVE-2017-8157

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information...

Huawei OceanStor Product Information Disclosure Vulnerability

Huawei OceanStor 5800 and OceanStor 6900 are both mid-range and high-end storage systems from Huawei, China. The information disclosure vulnerability exists in Huawei OceanStor 5800 V3 and OceanStor 6900 V3 products due to the use of TLS 1.0 for transport encryption. An attacker could exploit the...

Huawei OceanStor 5800 Integer Overflow Vulnerability

Huawei OceanStor 5800 is a storage system for mid-range and high-end storage from Huawei China. An integer overflow vulnerability exists in Huawei OceanStor 5800 V300R003C00 version. An attacker can exploit this vulnerability by sending a large number of abnormal NFS Network File System messages ...

CVE-2016-8795

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...

Integer overflow

The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System NFS packets, causing an anomaly in specific disk arrays...

CVE-2016-6177

The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System NFS packets, causing an anomaly in specific disk arrays...

CVE-2016-6177

The CVE-2016-6177 entry concerns Huawei OceanStor 5800 V300R003C00 with an integer overflow vulnerability. Concrete details from multiple connected sources show: affected product is Huawei OceanStor 5800 series (5800) using firmware version V300R003C00; the vulnerability can be triggered by proce...

CVE-2016-6177

The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System NFS packets, causing an anomaly in specific disk arrays...

CVE-2016-8032

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...

Multiple Local Security Bypass Vulnerabilities in Intel Security Anti-Virus Engine

Intel Security Anti-Virus Engine AVE is a multi-OS anti-virus engine from Intel formerly McAfee that detects and removes viruses, spyware, Trojans and worms in real-time, ensuring comprehensive network protection for desktops and laptops. A security vulnerability exists in Intel Security AVE...

CVE-2016-8031

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...

CVE-2016-8031

The CVE-2016-8031 entry concerns Intel Security Anti-Virus Engine (AVE) versions 5200 through 5800. The vulnerability is a local bypass of security protections, exploitable by a crafted input file, allowing a local attacker to bypass local security controls. The available connected documents conf...