13121 matches found
Adobe ColdFusion Multiple Vulnerabilities (APSB17-30)
Adobe ColdFusion is prone to information disclosure and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Double Free
Overview Affected versions of this package are vulnerable to Double Free. Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error. Remediation There is no fixed version for krb5...
Double free
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
Code injection
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions...
CVE-2017-11462
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
CVE-2017-11462
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
CVE-2017-11462
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
CVE-2017-11462
CVE-2017-11462 is a reported double free vulnerability in MIT Kerberos 5 (krb5) with unspecified impact. The initial description states a double free allows attackers to cause unspecified effects via automatic deletion of security contexts on error. Connected documents reiterate the issue as a do...
CVE-2017-11462
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
CVE-2017-11462
Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...
Regular Expression Denial of Service
Overview Affected versions of parsejson are vulnerable to a regular expression denial of service when parsing untrusted user input. Recommendation The parsejson package has not been functionally updated since it was initially released. Additionally, it provides functionality which is natively...
RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 5 (Important) (RHSA-2017:2637)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2637 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...
CVE-2017-14137
ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...
Memory corruption
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...
ppmd Path Traversal Vulnerability
ppmd is a compression algorithm used by both 7zip and WinRAR compression software. A directory traversal vulnerability exists in ppmd versions 10.1-5. An attacker can exploit the vulnerability by reading a directory traversal sequence with a specially crafted request ... / with a specially crafte...
Directory traversal
Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5...
CVE-2014-8163
CVE-2014-8163 : Affected product is Red Hat Satellite 5. The vulnerability is a directory traversal in the XMLRPC interface, enabling an attacker to write arbitrary files or directories to the Satellite server’s /var/satellite directory. Root cause: directory traversal via XMLRPC handling. Impact...
CVE-2015-1199
Directory traversal vulnerability in ppmd 10.1-5...