9904 matches found
UBUNTU-CVE-2015-2267
mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value...
[SECURITY] Fedora 21 Update: gcab-0.4-7.fc21
gcab is a tool to manipulate Cabinet archive...
OpenJDK: jar directory traversal issues (Tools, 8064601)
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
ScadaTEC ScadaPhone and ModbusTagServer SCADA Remote Code Execution - Ver2 (CVE-2011-4535)
A stack buffer overflow vulnerability has been reported in ScadaTEC ScadaPhone and ModbusTagServer. The vulnerability is due to a boundary check error. A remote attacker can exploit this issue by enticing a victim to open a specially crafted ZIP archive file with the affected product. Successful...
ClamAV Denial of Service Vulnerability (CNVD-2015-03163)
ClamAV is an open source antivirus. A denial of service vulnerability exists in versions of ClamAV prior to 0.98.7 that allows remote attackers to cause a denial of service via a crafted xy archive file...
jar: directory traversal vulnerability
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
OpenJDK: jar directory traversal issues (Tools, 8064601)
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
Fedora 20 : clamav-0.98.7-1.fc20 (2015-7378)
ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...
CVE-2015-2668
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...
CVE-2015-2668
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...
DEBIAN-CVE-2015-2668
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...
Code injection
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...
CVE-2015-2668
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file...
ClamAV < 0.98.7 Multiple Vulnerabilities
According to its version, the ClamAV clamd antivirus daemon on the remote host is prior to 0.98.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the pefromupx function in upx.c. A remote attacker can exploit this flaw, via a specially crafted file, to...
PHP PHAR File Parsing Sensitive Information Disclosure Vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. PHP...
PHP 'phar_set_inode()' function buffer overflow vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...
Important: java-1.8.0-openjdk
Issue Overview: An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Ja...
[SECURITY] Fedora 22 Update: libarchive-3.1.2-12.fc22
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
clamav: multiple issues
CVE-2015-2170 denial of service A flaw has been found in the UPX decoder with crafted files. During unpacking there are two range checks which are implemented "manually". Those checks lack the detection of overflows which are considered by the CLIISCONTAINED macro. - CVE-2015-2221 denial of...
