Code injection

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

CVE-2018-19218

CVE-2018-19218 affects LibSass 3.5-stable. The vulnerability is an illegal address access in Sass::Parser::parse_css_variable_value_token, causing a denial of service. The connected documents confirm the component and root cause but do not provide a concrete patch/version for remediation. Exploit...

CVE-2018-19219

CVE-2018-19219 affects LibSass 3.5-stable, where an illegal address access in the function Sass::Eval::operator can lead to a denial of service. The Connected documents consistently describe the same issue, with no public details on vulnerable configurations beyond LibSass 3.5-stable. Relevant im...

CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

CVE-2018-19219

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...

gaoxiaotingtingting directory traversal vulnerability

The Node.js module gaoxiaotingtingting is an HTTP server. A directory traversal vulnerability exists in gaoxiaotingtingting. An attacker can exploit this vulnerability by placing ". /" in a url to access the file system...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can pass an image file to the Exiv2::FileIo::pathabi:cxx11 function in basicio.cpp to cause an illegal address access that can crash the application...

Desafio Directory Traversal Vulnerability

desafio is a web server. A directory traversal vulnerability exists in desafio. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2018-05178)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information disclosure...

Updated nasm packages fix security vulnerabilities

This update provides nasm 2.13.03 and fixes the following security issues: In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments. In Netwide...

MGASA-2018-0129 Updated nasm packages fix security vulnerabilities

This update provides nasm 2.13.03 and fixes the following security issues: In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments. In Netwide...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2018:0284-1)

This update for ncurses fixes several issues. These security issues were fixed : - CVE-2017-13734: Prevent illegal address access in the ncsafestrcat function in strings.c that might have lead to a remote denial of service attack bsc1056126. - CVE-2017-13733: Prevent illegal address access in the...

SUSE-SU-2018:0178-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issue fixed: - CVE-2017-13733: Fix illegal address access in the fmtentry function bsc1056127...

SUSE-SU-2018:0120-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-13728: Fix infinite loop in the nextchar function in compscan.c bsc1056136. - CVE-2017-13730: Fix illegal address access in the function ncreadentrysource bsc1056131. - CVE-2017-13733: Fix illegal address access...

MGASA-2018-0001 Updated ncurses packages fix security vulnerabilities

Possible RCE via stack-based buffer overflow in the fmtentry function CVE-2017-10684. Possible RCE with format string vulnerability in the fmtentry function CVE-2017-10685. Illegal address access in appendacs CVE-2017-11112. Dereferencing NULL pointer in ncparseentry CVE-2017-11113...

Updated ncurses packages fix security vulnerabilities

Possible RCE via stack-based buffer overflow in the fmtentry function CVE-2017-10684. Possible RCE with format string vulnerability in the fmtentry function CVE-2017-10685. Illegal address access in appendacs CVE-2017-11112. Dereferencing NULL pointer in ncparseentry CVE-2017-11113...

MGASA-2018-0002 Updated ncurses packages fix security vulnerabilities

Possible RCE via stack-based buffer overflow in the fmtentry function CVE-2017-10684. Possible RCE with format string vulnerability in the fmtentry function CVE-2017-10685. Illegal address access in appendacs CVE-2017-11112. Dereferencing NULL pointer in ncparseentry CVE-2017-11113. Fix infinite...

Updated ncurses packages fix security vulnerabilities

Possible RCE via stack-based buffer overflow in the fmtentry function CVE-2017-10684. Possible RCE with format string vulnerability in the fmtentry function CVE-2017-10685. Illegal address access in appendacs CVE-2017-11112. Dereferencing NULL pointer in ncparseentry CVE-2017-11113. Fix infinite...

IBM Rational Collaborative Lifecycle Management Unspecified Vulnerability

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...

CVE-2017-17819

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function findcc in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skipwhite calls are not validated...