47 matches found
CVE-2016-7420
Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...
CVE-2016-7420
Crypto++ (cryptopp) up to version 5.6.4 is vulnerable to information disclosure due to missing documentation of the NDEBUG compile-time switch to disable asserts, enabling context-dependent attackers to access sensitive data from process memory after an assertion failure (e.g., core dumps). Upstr...
CVE-2015-7420
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421...
CVE-2015-7420
CVE-2015-7420 is a GSKit vulnerability reported in IBM advisories affecting GSKit in IBM MQ M2000 appliances prior to 8.0.0.4. The issue allows a remote attacker to obtain sensitive information due to the GSKit PRNG state being duplicated during a fork, creating a window where child processes may...
CVE-2013-7420
Summary: CVE-2013-7420 is a buffer overflow in Hancom Office 2010 SE. A long string in the Text attribute of a TEXTART XML element in an HML file can be used remotely to execute arbitrary code. Affected software is Hancom Office 2010 SE; vulnerable component is the TEXTART XML element’s Text attr...
CVE-2014-7420
The CVE-2014-7420 entry affects the Android application Just Bureaucracy (com.magzter.justbureaucracy) version 3.0.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
