96 matches found
CVE-2016-8387
CVE-2016-8387 describes a heap-based buffer overflow in Iceni Argus during PDF to HTML conversion when decoding objects with multiple encodings ending in LZW. The overflow arises from missing bounds checking in the LZW decoder (ipLZWFeedCreate/ipLZWFeedRead paths), potentially enabling code execu...
GLSA-201607-02 : libpcre: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201607-02 libpcre: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libpcre. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or crea...
FreeBSD : php -- multiple vulnerabilities (85eb4e46-cf16-11e5-840f-485d605f4717)
PHP reports : - Core : - Fixed bug 71039 exec functions ignore length but look for NULL termination. - Fixed bug 71323 Output of streamgetmetadata can be falsified by its input. - Fixed bug 71459 Integer overflow in iptcembed. - PCRE : - Upgraded bundled PCRE library to 8.38.CVE-2015-8383,...
CVE-2015-8387
PCRE before 8.38 mishandles ?123 subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service integer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...
CVE-2015-8387
CVE-2015-8387 concerns the PCRE library prior to 8.38. The description states that certain (?123) subroutine calls are mishandled, allowing a remote attacker to cause a denial of service via an crafted regex (integer overflow risk) and possibly other impact. IBM/related bulletins in the connected...
[CORE-2014-0009] - Advantech EKI-6340 Command Injection
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL: http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection Date...
Advantech EKI-6340 - Command Injection
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL: http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection Date...
CVE-2014-8387
creationtimestamp| type| source ---|---|--- 2014-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35357...
Advantech EKI-6340 - Command Injection
Advantech EKI-6340 - Command Injection Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL:...
CVE-2014-8387
cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi...
CVE-2014-8387
Affected product/versions: Advantech EKI-6340 series (v2.05). Vulnerability: OS Command Injection via the web CGI (ping.cgi) caused by improper sanitization of the pinghost parameter; the vulnerability stems from the call_ping function in /usr/webui/webroot/cgi/utility.cgi, where shell metacharac...
Advantech EKI-6340 2.05 Command Injection
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL: http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection Date...
Advantech EKI-6340 2.05 Command Injection Vulnerability
Advantech EKI-6340 series is vulnerable to an OS command injection, which can be exploited by remote attackers to execute arbitrary code and commands, by using a non privileged user against a vulnerable CGI file. Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-63...
Advantech EKI-6340 Command Injection
1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL: http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection Date published: 2014-11-19 Date of last update: 2014-11-19 Vendors contacted: Advantech Release mode: User...
SuSE 10 Security Update : glibc (ZYPP Patch Number 8387)
This update for GNU C library glibc fixes multiple integer overflows in strtod and related functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63295;...
