12491 matches found
Heap overflow
The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20453
The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20451
The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20453
The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20451
The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20453
CVE-2018-20453 affects the libdoc library (getlong in numutils.c) with a heap-based buffer over-read in versions up to 2017-10-23. This can cause a denial of service (application crash) when parsing a crafted file. The connected documents corroborate the vulnerable component and impact; no patch/...
CVE-2018-20453
The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20451
The vulnerability CVE-2018-20451 affects the libdoc library (reader.c, process_file) through 2017-10-23, where a heap-based buffer over-read allows a crafted file to cause a denial of service (application crash). Connected sources consistently describe this as a heap-based over-read in the proces...
CVE-2018-20451
The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
CVE-2018-20409
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...
CVE-2018-20409
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...
CVE-2018-20409
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...
CVE-2018-20409
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...
CVE-2018-20409
CVE-2018-20409 affects Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create (Core/Ap4AvccAtom.cpp), demonstrated by mp42hls. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/OSV entries). No patch/version remediation details are provided in the s...
openSUSE: Security Advisory for tcpdump (openSUSE-SU-2018:4252-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PHP 7.2.x < 7.2.13 Multiple vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.13. It is, therefore, affected by multiple vulnerabilities: - An arbitrary command injection vulnerability exists in the imapopen function due to improper filters for mailbox names prior to passing...
PHP 7.1.x < 7.1.25 Multiple vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.25. It is, therefore, affected by multiple vulnerabilities: - An arbitrary command injection vulnerability exists in the imapopen function due to improper filters for mailbox names prior to passing...
PHP 5.6.x < 5.6.39 Multiple vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.39. It is, therefore, affected by multiple vulnerabilities: - An arbitrary command injection vulnerability exists in the imapopen function due to improper filters for mailbox names prior to passing...
