28 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-8367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for ...
ECHO-B122-8367-770F
Bulletin has no description...
MAL-2025-8367 Malicious code in @leaffm/automatic-script-test (npm)
The package @leaffm/automatic-script-test was found to contain malicious code...
CVE-2025-8367
A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-8367 Portabilis i-Educar funcionario_vinculo_lst.php cross site scripting
A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
Linux Distros Unpatched Vulnerability : CVE-2015-8367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object...
CVE-2020-8367
CVE-2020-8367 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-8367
The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...
CVE-2015-8367
The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...
CVE-2015-8367
CVE-2015-8367 affects Libraw’s phase_one_correct function; Libraw before 0.17.1 can cause memory errors and may allow arbitrary code execution due to memory object initialization issues. The available connected advisories indicate fixes in Libraw 0.17.1 and later (e.g., upstream release notes, di...
CVE-2018-8367
The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8367)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SUSE SLED12 Security Update : libraw (SUSE-SU-2017:2300-1)
This update for libraw fixes the following issues : - CVE-2015-3885: A specially crafted raw image file could have caused a Denial of Service through an integer overflow. bsc930683 - CVE-2015-8367: The function phaseonecorrect did not handle memory object initialization correctly, which may have...
CVE-2017-8367
Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner,...
CVE-2017-8367
The CVE-2017-8367 entry covers a local buffer overflow in Ether Software Easy MOV Converter and related burn/converter tools (e.g., Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, etc.). The root cause is a buffer overflow triggered by a long username, enabling a lo...
CVE-2016-8367
CVE-2016-8367 affects Schneider Electric Magelis HMI panels (GTO, GTU, STO/STU, XBT) with web server functionality. The issue is uncontrolled resource consumption: an attacker can open multiple connections to the Web Gate Server and keep them open, causing denial of service by exhausting the serv...
CVE-2016-8367
An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen...
GLSA-201701-60 : LibRaw: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201701-60 LibRaw: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LibRaw. Please review the CVE identifiers referenced below for details. Impact : An attacker could execute arbitrary code, cause a Denial ...
openSUSE Security Update : libraw (openSUSE-2016-1264)
This update for libraw fixes the following issues : - CVE-2015-8367: Memory objects are not intialized properly boo957517. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-1264. T...