59 matches found
CVE-2008-7321
The CVE-2008-7321 entry corresponds to a cross-site scripting (XSS) vulnerability in the Tubepress WordPress plugin prior to version 1.6.5. Multiple connected sources confirm the affected component is the Tubepress plugin for WordPress and that the root cause is an XSS flaw, enabling attacker-con...
CVE-2019-7321
Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...
CVE-2019-7321
CVE-2019-7321 affects Artifex MuPDF 1.14 via an uninitialized variable in the function fz_load_jpeg, causing a heap overflow that can enable arbitrary code execution. The connected PT security entry corroborates this and recommends upgrading to a newer MuPDF version that contains a fix. No explic...
CVE-2019-7321
Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...
SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0867-1)
This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0811-1)
This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...
FreeBSD : wireshark -- multiple security issues (c5ab620f-4576-4ad5-b51f-93e4fec9cd0e)
wireshark developers reports : wnpa-sec-2018-05. IEEE 802.11 dissector crash. CVE-2018-7335 wnpa-sec-2018-06. Large or infinite loops in multiple dissectors. CVE-2018-7321 through CVE-2018-7333 wnpa-sec-2018-07. UMTS MAC dissector crash. CVE-2018-7334 wnpa-sec-2018-08. DOCSIS dissector crash...
Security fix for the ALT Linux 9 package wireshark version 2.4.5-alt1
Feb. 26, 2018 Anton Farygin 2.4.5-alt1 - 2.4.5 - fixes: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router...
Wireshark Security Updates (wnpa-sec-2018-05 to wnpa-sec-2018-14) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
DEBIAN-CVE-2018-7321
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type...
CVE-2018-7321
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type...
CVE-2018-7321
CVE-2018-7321 affects Wireshark’s epan/dissectors/packet-thrift.c, where a large loop could occur when parsing certain Thrift inputs in Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12.** The issue was addressed by not proceeding with dissection after encountering an unexpected type, effectively preventing...
KLA11201 Multiple vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...
CVE-2017-7321
setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...
CVE-2017-7321
setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...
CVE-2017-7321
CVE-2017-7321 affects MODX Revolution 2.5.4-pl and earlier. The issue is a remote PHP code execution vulnerability in setup/controllers/welcome.php triggered by passing the config_key parameter to the URL setup/index.php?action=welcome. Public records describe it as an arbitrary code execution pa...
CVE-2014-7321
The CVE-2014-7321 entry concerns the Firenze map (com.wFirenzemap) Android app version 0.1, which does not verify SSL X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documents across NVD, CVE list, and PrIoN...
CVE-2013-7321
The CVE-2013-7321 entry concerns a Cross-site Scripting (XSS) vulnerability in the D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30. The flaw permits remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: web interface; root cause: imp...