1990 matches found
CVE-2016-9691: Improper Restriction of XML External Entity Reference
IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...
PT-2017-10269
Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to exploit it and induce the application to perform server-side DNS looku...
PT-2017-10268
Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information ...
castironradiatorcentre.co.uk XSS vulnerability
Vulnerable URL: https://www.castironradiatorcentre.co.uk/products.asp?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E=Accessories+%26+Spares=Wall+Stays=buy=CDC-LUXSTAY-BLKNI=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for...
CVE-2017-5042
Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...
Google Chrome < 57.0.2987.133 Multiple Vulnerabilities
Binary data 700054.pasl...
OPENSUSE-SU-2017:0909-1 Security update for Chromium
This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...
Google Chrome < 57.0.2987.133 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop29 advisory. - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linu...
FreeBSD : chromium -- multiple vulnerabilities (7cf058d8-158d-11e7-ba2c-e8e0b747a45a)
Google Chrome Releases reports : 5 security fixes in this release, including : - 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar - 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs - 662767 High CVE-2017-5052: Bad...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 5 security fixes in this release, including: 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs 662767 High CVE-2017-5052: Bad cast in...
DEBIAN-CVE-2017-5511
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...
Heap overflow
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...
CVE-2017-5511
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...
chromium-browser: incorrect handling of cookies in cast
Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...
Google Chrome < 57.0.2987.98 Multiple Vulnerabilities
Binary data 9991.pasl...
grpc: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start
Detailed report: https://oss-fuzz.com/testcase?key=5138174202347520 Project: grpc Fuzzer: libFuzzergrpcurifuzzertest Fuzz target binary: urifuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff5af703d0 Crash State: Bad-cast to const std::1::less sta...
libtsm: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start
Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4858886169296896 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerubsanlibtsm Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe13981c...
nss: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_GLOBAL__sub_I_quickder_target.cc;_start
Project: https://hg.mozilla.org/projects/nss Detailed report: https://oss-fuzz.com/testcase?key=4585070186725376 Project: nss Fuzzer: libFuzzernssquickder Fuzz target binary: quickder Job Type: libfuzzerubsannss Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe7319e0e8 Crash State:...