CVE-2017-7905

The CVE covers a weakness in cryptographic handling of passwords in GE Multilin protection relays (SR series, UR/URPlus). A non-random initialization vector was used for ciphertext passwords, making them vulnerable to dictionary attacks. Password ciphertext could be obtained from the front LCD or...

ALPINE-CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7905

FFmpeg vulnerability CVE-2016-7905 affects the read_gab2_sub function in libavformat/avidec.c, where a crafted AVI file can trigger a NULL pointer dereference leading to a denial of service. Affected versions are FFmpeg before 3.1.4. The issue has been reported across multiple advisories (NVD ent...

openSUSE Security Update : ffmpeg (openSUSE-2016-1203)

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

Unitronics UniDownloader and VisiLogic OPLC IDE IPWorksSSL.HTTPS Memory Corruption (CVE-2015-7905)

A memory corruption vulnerability exists in Unitronics, VisiLogic OPLC IDE and UniDownloader. The vulnerability is due to untrusted pointer dereference on the SSLCertHandle parameter of the IPWorksSSL.HTTPS ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerab...

CVE-2015-7905

CVE-2015-7905 affects Unitronics VisiLogic OPLC IDE and UniDownloader via the IPWorksSSL.HTTPS ActiveX controls. A memory/pointer handling flaw exists in the SSLCertHandle (HTTPS) and related properties (WinSockPath, PostDataB/FirewallDataB) that can lead to remote code execution when a user open...

CVE-2015-7905

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors...

openSUSE: Security Advisory for chromium (openSUSE-SU-2014:1626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-7905

Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORYBROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site...

UBUNTU-CVE-2014-7905

Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORYBROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site...

CVE-2014-7905

CVE-2014-7905 affects Google Chrome prior to 39.0.2171.65 on Android, where navigation to a URL could be allowed from intents lacking CATEGORY_BROWSABLE, bypassing access restrictions. The vulnerability was fixed in Chrome 39.0.2171.65 (and associated security updates in openSUSE/OpenChromium adv...

ManageEngine SupportCenter Plus < 7.9 Build 7905 Multiple Vulnerabilities

The remote host is running a version of ManageEngine SupportCenter Plus less than 7.9 build 7905. Such versions are affected by multiple vulnerabilities: - A SQL injection vulnerability in the 'countSql' parameter of the '/servlet/AJaxServlet' script. - Multiple stored cross-site scripting...

ManageEngine Support Center Plus 7903 XSS / SQL Injection

| |.--.--.| || | .-----.| | |. | || || | ||. | | | || | |. | ||.| \ ||. | |||||||| |: 1 | |: 1 ||: 1 | |::.. . | |::.. . ||::.. . | -------' -------'-------' +--------------------------------------------------------------------------------------------------------------------------------+ | Exploi...

[Full-disclosure] Cisco 7905 VoIP phone crashing from dsniff arpspoof?

In the readme in the ohrwurm tarball from Matthius Wenzel's site: http://mazzoo.de/blog/2006/08/25ohrwurm snip SUCCESS As of August 2006 ohrwurm broke the following applications/transports: - linphonec 1.10 / iLBC stops sending RTP, no crash - linphonec 1.10 / iLBC re-negotiates PCMA via SIP, but...