45 matches found
CVE-2020-7244
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell metacharacters in the Router IP Address field. In some cases, authentication can be achieved with the comtech password for the...
CVE-2020-7244
CVE-2020-7244 affects Comtech Stampede FX-1010, version 7.4.3. Affects the Poll Routes page: remote authenticated administrators can achieve remote code execution by entering shell metacharacters in the Router IP Address field. In some cases, authentication may be obtained with the comtech passwo...
Fedora 28 : mingw-glib2 / mingw-glibmm24 (2018-3238d4da59)
update to 2.56.x Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for mingw-glibmm24 FEDORA-2018-3238d4da59
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mingw-glib2 FEDORA-2018-3238d4da59
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-7244
Schneider Electric 66074 MGE Network Management Card Transverse (in MGE UPS/MGE STS) has an information disclosure vulnerability in its integrated web server (ports 80/443). A remote attacker with network access can obtain sensitive device information. Root cause is information disclosure via the...
CVE-2014-7244
CVE-2014-7244 is rejected/not used; this candidate does not correspond to an active vulnerability entry.
CVE-2017-7244
The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...
UBUNTU-CVE-2017-7244
The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...
CVE-2017-7244
CVE-2017-7244 affects Cloud Pak for Security (CP4S) in CP4S 1.7.2.0, 1.8.0.0, and 1.8.1.0. The CVE describes a PCRE/libpcre1 issue in the _pcre32_xclass function that can cause a denial of service via remote crafted input, due to an invalid memory read in pcre_xclass.c. The connected IBM CP4S adv...
CVE-2017-7244
The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...
CVE-2016-7244
CVE-2016-7244 is a Microsoft Office denial-of-service vulnerability affecting multiple Office editions across Windows and macOS (Office 2007 SP3, 2010 SP2, 2013 SP1/RT, 2016, Office for Mac 2011/2016, and related Web Apps/SharePoint components). The root cause is improper handling of objects in m...
KLA10902 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Out-of-bounds read can be exploited remotely via a specially designed...
CVE-2015-7244
The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets...
CVE-2015-7244
Mobatek MobaXterm prior to version 8.3 is affected by CVE-2015-7244 due to a default server configuration that disables access control and does not require authentication for X11 connections. This allows a remote attacker to execute arbitrary commands or view/inject X11 data via port 6000, using ...
MobaXterm server may allow arbitrary command injection due to missing X11 authentication
Overview The MobaXterm server prior to verion 8.3 is vulnerable to arbitrary command injection over port 6000 when using default X11 settings. Description CWE-306: Missing Authentication for Critical Function - CVE-2015-7244MobaXterm server prior to version 8.3 includes an X11 server listening on...
Memory corruption
Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...
CVE-2006-7244
CVE-2006-7244 describes a memory leak/DoS in libpng when processing JPEG images with an iCCP chunk and a negative embedded profile length. Affected versions are libpng 1.2.13beta1 and other releases before 1.2.15beta3; exploitation can lead to a memory leak or segmentation fault. The issue arises...
CVE-2009-5063
Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...