35 matches found
CVE-2019-6773
Summary: CVE-2019-6773 affects Foxit Reader 9.4.1.16828. The vulnerability arises from improper handling of the richValue property of a Field object within AcroForms, due to a missing validation of the object before performing operations. This leads to information disclosure via crafted pages/fil...
CVE-2019-8272
UltraVNC 1211 contains off-by-one vulnerabilities in the VNC server code that can potentially lead to remote code execution when exploited over a network. The issue is fixed in revision 1212. A Nessus plugin also documents other related UltraVNC CVEs (e.g., 2019-8274, 2019-8271) affecting version...
CVE-2017-8272
CVE-2017-8272 affects Qualcomm components in Android CAF builds using the Linux kernel. In a driver function, a value supplied from userspace is not properly validated, potentially causing an out-of-bounds heap write. The vulnerability is described as a kernel-level issue with the potential for m...
Debian DSA-3850-1 : rtmpdump - security update
Dave McDaniel discovered multiple vulnerabilities in rtmpdump, a small dumper/library for RTMP media streams, which may result in denial of service or the execution of arbitrary code if a malformed stream is dumped. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Ubuntu: Security Advisory (USN-3283-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-917-1 : rtmpdump security update
Several vulnerabilities were found in rtmpdump and the librtmp library. CVE-2015-8270 A bug in AMF3ReadString in librtmp can cause a denial of service via application crash to librtmp users that talk to a malicious server. CVE-2015-8271 The AMF3Decode function in librtmp doesn't properly validate...
[SECURITY] [DLA 917-1] rtmpdump security update
Package : rtmpdump Version : 2.4+20111222.git4e06e21-1+deb7u1 CVE ID : CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Several vulnerabilities were found in rtmpdump and the librtmp library. CVE-2015-8270 A bug in AMF3ReadString in librtmp can cause a denial of service via application crash to librtmp...
CVE-2015-8272
RTMPDump 2.4 allows remote attackers to trigger a denial of service NULL pointer dereference and process crash...
CVE-2015-8272
CVE-2015-8272 affects RTMPDump (and is referenced across multiple advisories) with a vulnerability in handling malformed RTMP streams. The linked OpenVAS/Ubuntu/Debian/NASL entries confirm rtmpdump flaws that can cause denial of service via a NULL pointer dereference and, in Debian/Cloud Foundry ...
CVE-2015-8272
RTMPDump 2.4 allows remote attackers to trigger a denial of service NULL pointer dereference and process crash...
CVE-2016-8272
Huawei HiSuite on Windows (version 4.0.5.300_OVE) contains an information disclosure flaw in the proxy settings UI: the password textbox does not disable copy, enabling an attacker who can log in to copy the user’s proxy password. CNVD-2017-05240 confirms the vulnerability in HiSuite 4.0.5.300_OV...
Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite
Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...
Dell iDRAC Products IPMI Arbitrary Command Injection Vulnerability
The remote host is running a version of iDRAC that ships with a version of IPMI that does not sufficiently randomize session ID values. An unauthenticated, remote attacker can exploit this to inject arbitrary commands into a privileged session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2014-8272
CVE-2014-8272 affects Dell iDRAC6 (modular before 3.65; monolithic before 1.98) and iDRAC7 before 1.57.57, where IPMI 1.5 session ID values are not properly randomized or selected, enabling remote attackers to brute-force session IDs and execute arbitrary commands. The vulnerability is remote (ne...