287 matches found
IBM Sterling Connect:Direct for Unix Privilege Vulnerability
IBM Sterling Connect:Direct is a file-based peer-to-peer file transfer solution from IBM in the United States. A privilege extraction vulnerability exists in IBM Sterling Connect:Direct for Unix versions 6.0.0, 4.3.0, and 4.2.0, which can be exploited by an attacker to gain unauthorized access to...
Zipios Denial of Service Vulnerability
Zipios is a C++ library for reading and writing Zip files. A security vulnerability exists in Zipios that stems from the program's failure to properly handle malformed ZIP files. An attacker can exploit the vulnerability to cause a denial of service or consume system resources...
Unspecified Vulnerability in Google API C++ Client
Google API C++ Client is a C++-based Google API client library from Google USA. An unspecified vulnerability exists in versions of Google API C++ Client prior to 2019-04-10. An attacker can exploit this vulnerability to cause a denial of service...
DEBIAN-CVE-2019-6292
An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote...
CVE-2019-0546
A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio...
Facebook Proxygen has an unspecified vulnerability
Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . An unspecified vulnerability exists in Facebook Proxygen. An attacker could exploit this vulnerability to cause a denial of service...
DEBIAN-CVE-2018-18928
International Components for Unicode ICU for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString in i18n/numberdecimalquantity.cpp...
Microsoft Azure IoT SDK Spoofing Vulnerability
Microsoft Windows is a family of operating systems released by Microsoft Corporation.Microsoft Azure Active Directory Connect is a service from Microsoft Corporation that provides identity and access management in the cloud. A spoofing vulnerability exists in the configuration of Azure IoT device...
UBUNTU-CVE-2018-10529
An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in librawx3f.cpp and librawcxx.cpp...
UBUNTU-CVE-2018-9138
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...
Google Chrome International Components for Unicode for C/C++ Denial of Service Vulnerability
Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU for C/C++ is a Unicode-supported, software internationalization, globalization C/C++ library. ICU for C/C++ in Google Chrome versions prior to 40.0.2214.91 A security vulnerability exists in the Regul...
International Components for Unicode (ICU) for C/C++ Buffer Overflow Vulnerability
International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A heap buffer...
International Components for Unicode/C++ Denial of Service Vulnerability
International Components for Unicode ICU is a set of libraries for the C/C++ and Java programming languages to manipulate Unicode data, and an open source project to support the internationalization of software. The 'ulocacceptLanguageFromHTTP' function in the common/uloc.cpp file of Internationa...
DEBIAN-CVE-2016-4463
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...
UBUNTU-CVE-2016-1646
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...
Mozilla Firefox and Firefox ESR Graphite 2 Code.cpp File Denial of Service Vulnerability
Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...
UBUNTU-CVE-2015-5276
The std::randomdevice class in libstdc++ in the GNU Compiler Collection aka GCC before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gcc-c++-4.1.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gcc-c++-3.2.3 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
Xerces-C++ XML Parsing Remote Denial of Service Vulnerability
Xerces is promoted by the Apache organization of an XML document parsing open source project . A vulnerability in the processing of XML data in internal/XMLReader.cpp in Apache Xerces-C allows remote attackers to conduct denial-of-service attacks...