Lucene search
+L

1666 matches found

OSS-Fuzz
OSS-Fuzz
•added 2017/07/06 4:50 p.m.•35 views

librawspeed: Bad-cast to rawspeed::RawDecoder from invalid vptr;rawspeed::RawDecoderDecodeThread;rawspeed::RawDecoder::startTasks

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4612305675354112 Project: librawspeed Fuzzer: libFuzzerlibrawspeedX3fParserFuzzer-GetDecoder-Decode Fuzz target binary: X3fParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeed...

6.7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/07/03 10:44 p.m.•23 views

librawspeed: Bad-cast to rawspeed::RawDecoder from invalid vptr;rawspeed::X3fDecoder::decompressSigma;rawspeed::X3fDecoder::decodeRawInternal

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4512203543674880 Project: librawspeed Fuzzer: libFuzzerlibrawspeedX3fParserFuzzer-GetDecoder-Decode Fuzz target binary: X3fParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeed...

6.7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/05/23 2:50 p.m.•32 views

gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;getPolygon;ILI2Reader::getGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6328230174785536 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000080e4d60 Crash State:...

7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/05/21 11:43 p.m.•19 views

gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;ILI2Reader::setFieldDefn;ILI2Reader::setFieldDefn

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5314575312355328 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000836a798 Crash State:...

7AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2017/05/10 12:00 a.m.•16 views

IBM WebSphere Cast Iron Solution XML External Entity Injection Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. An XML external entity injection vulnerability exists in IBM WebSphere Cast Iron Solution. A remote attack...

9CVSS7.2AI score0.01412EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/10 12:00 a.m.•18 views

IBM WebSphere Cast Iron Solution Security Bypass Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. A security vulnerability exists in IBM WebSphere Cast Iron Solution that stems from the program failing to...

8.6CVSS7AI score0.0161EPSS
SaveExploits0References1
OSV
OSV
•added 2017/05/05 7:29 p.m.•14 views

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

8.6CVSS5.8AI score0.01412EPSS
SaveExploits0References2
Prion
Prion
•added 2017/05/05 7:29 p.m.•18 views

Xxe

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

9CVSS7.1AI score0.01412EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/05/05 7:29 p.m.•27 views

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

8.6CVSS8.3AI score0.0161EPSS
SaveExploits0References2
Prion
Prion
•added 2017/05/05 7:29 p.m.•20 views

Input validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

7.8CVSS6.8AI score0.0161EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/05/05 7:29 p.m.•29 views

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

9CVSS8.5AI score0.01412EPSS
SaveExploits0References2
OSV
OSV
•added 2017/05/05 7:29 p.m.•13 views

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

8.6CVSS5.9AI score0.0161EPSS
SaveExploits0References2
CVE
CVE
•added 2017/05/05 7:00 p.m.•47 views

CVE-2016-9691

CVE-2016-9691—IBM WebSphere Cast Iron Solution : Affected products are WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0. The flaw is an XML External Entity (XXE) vulnerability in XML data processing, enabling a remote attacker to cause a denial of service and potentially expose sensitive informatio...

9CVSS8.4AI score0.01412EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/05/05 7:00 p.m.•53 views

CVE-2016-9692

The CVE affects IBM WebSphere Cast Iron Solution versions 7.0.0 and 7.5.0.0, where improper validation of user-supplied input enables External Service Interaction. An attacker can induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names, potentially cau...

8.6CVSS8.2AI score0.0161EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/05/05 7:00 p.m.•33 views

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

8.6AI score0.01412EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/05/05 7:00 p.m.•36 views

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

8.4AI score0.0161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/05 12:00 a.m.•6 views

CVE-2016-9691: Improper Restriction of XML External Entity Reference

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

9CVSS5.8AI score0.01412EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/05 12:00 a.m.•5 views

CVE-2016-9692: Improper Input Validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

8.6CVSS6AI score0.0161EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2017/04/27 6:03 p.m.•14 views

castironradiatorcentre.co.uk XSS vulnerability

Vulnerable URL: https://www.castironradiatorcentre.co.uk/products.asp?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E=Accessories+%26+Spares=Wall+Stays=buy=CDC-LUXSTAY-BLKNI=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/04/10 12:00 a.m.•41 views

Google Chrome < 57.0.2987.133 Multiple Vulnerabilities

Binary data 700054.pasl...

8.8CVSS9.4AI score0.01493EPSS
SaveExploits0References2
Rows per page
Query Builder