7252 matches found
PT-2014-1423
Name of the Vulnerable Software and Affected Versions file versions prior to 5.19 Red Hat Enterprise Linux file-static-5.04 Red Hat Enterprise Linux file-5.04 Red Hat Enterprise Linux file-debuginfo-5.04 Red Hat Enterprise Linux file-libs-5.04 Red Hat Enterprise Linux file-devel-5.04 Debian...
kernel: net: ping: refcount issue in ping_init_sock() function
A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...
UBUNTU-CVE-2014-0240
The modwsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes...
UBUNTU-CVE-2014-0749
Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...
CVE-2014-0749: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...
Debian Security Advisory DSA 2921-1 (xbuffy - security update)
Michael Niedermayer discovered a vulnerability in xbuffy, an utility for displaying message count in mailbox and newsgroup accounts. By sending carefully crafted messages to a mail or news account monitored by xbuffy, an attacker can trigger a stack-based buffer overflow, leading to xbuffy crash ...
Updated couchdb packages fix CVE-2014-2668
Updated couchdb packages fix security vulnerability: Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids CVE-2014-2668...
NetworkTrafficView - Monitor the traffic on your network adapter
NetworkTrafficView is a network monitoring tool that captures the packets pass through your network adapter, and displays general statistics about your network traffic. The packets statistics is grouped by the Ethernet Type, IP Protocol, Source/Destination Addresses, and Source/Destination ports...
CVE-2014-2668
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
Code injection
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
CVE-2014-2668
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
CVE-2014-2668: Improper Input Validation
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
PT-2014-4861
Name of the Vulnerable Software and Affected Versions Apache CouchDB versions 1.5.0 and earlier Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources. This is achieved by exploiting the count parameter in the "/ uuids" API endpoint...
FreeBSD : samba -- multiple vulnerabilities (03e48bf5-a96d-11e3-a556-3c970e169bc2)
Samba project reports : In Samba's SAMR server we neglect to ensure that attempted password changes will update the bad password count, nor set the lockout flags. This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly. This is available...
pidgin: DoS in IRC protocol plugin due to arguement parsing
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...
Thinksaas某处绕过过滤的注射漏洞
简要描述： 添加标签过滤不严。 详细说明： 今天下了一个thinksaas 最新版， 就看了看 在xfkxfk 爆了一些洞后 还是变安全了一些。 但是还是有很多依旧没过滤。 xfkxfk 爆了app/tag/action/add.php 我看的漏洞文件 app/tag/action/addajax.php case "do": $objname = t$POST'objname'; $idname = t$POST'idname'; $objid = t$POST'objid'; $tags = t$POST'tags';...
CVE-2013-6881
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 sector size or 2 skip count fields for the forensic imaging task...
PT-2014-3212
Name of the Vulnerable Software and Affected Versions CRU Ditto Forensic FieldStation versions prior to 2013Oct15a Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 sector size or 2 skip count fields for the forensic imaging task...
CVE-2013-7020
The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...