Lucene search
+L

48 matches found

Tenable Nessus
Tenable Nessus
added 2015/12/08 12:0 a.m.27 views

FreeBSD : libraw -- index overflow in smal_decode_segment (db04bf07-9cc8-11e5-8c2b-c335fa8985d7)

ChenQin reports : The LibRaw raw image decoder has multiple vulnerabilities that can cause memory errors which may lead to code execution or other problems. In CVE-2015-8366, LibRaw's smaldecodesegment function does not handle indexes carefully, which can cause an index overflow. %NASLMINLEVEL...

9.8CVSS8.7AI score0.04939EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2015/12/02 12:0 a.m.34 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS7.4AI score0.04939EPSS
SaveExploits0References2
OSV
OSV
added 2015/12/02 12:0 a.m.5 views

UBUNTU-CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS7.6AI score0.04939EPSS
SaveExploits0References3
FreeBSD
FreeBSD
added 2015/11/30 12:0 a.m.41 views

libraw -- index overflow in smal_decode_segment

ChenQin reports: The LibRaw raw image decoder has multiple vulnerabilities that can cause memory errors which may lead to code execution or other problems. In CVE-2015-8366, LibRaw's smaldecodesegment function does not handle indexes carefully, which can cause an index overflow...

9.8CVSS9.7AI score0.04939EPSS
SaveExploits0References3
NVD
NVD
added 2014/10/20 6:55 p.m.12 views

CVE-2014-8366

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...

7.5CVSS8.5AI score0.02072EPSS
SaveExploits1References3
CVE
CVE
added 2014/10/20 6:0 p.m.57 views

CVE-2014-8366

CVE-2014-8366 affects openSIS 4.5–5.3, where an SQL injection flaw in index.php allows remote attackers to execute arbitrary SQL via the Username and password fields. Root cause is improper handling of user-supplied input in the login mechanism, enabling manipulation of the underlying database. R...

7.5CVSS8.8AI score0.02072EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2014/10/20 6:0 p.m.27 views

CVE-2014-8366

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...

8.5AI score0.02072EPSS
SaveExploits1References3
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:0 a.m.2 views

MS:ACBEDDDF-8366-42BC-B360-37455AABDD22

...

7AI score
SaveExploits0
Rows per page
Query Builder