Lucene search
+L

12966 matches found

BDU FSTEC
BDU FSTEC
added 2018/04/27 12:00 a.m.15 views

The vulnerability of the ReadTIFFImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c file of the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through the use of a specially crafted file...

7.1CVSS7.2AI score0.01723EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:00 a.m.14 views

The vulnerability of the wma_roam_scan_filter function in the Android operating system’s WLAN component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaroamscanfilter function in the Android WLAN operating system from the CAF repository is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a specially...

7.8CVSS6.4AI score0.00204EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:00 a.m.10 views

The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS6.2AI score0.17959EPSS
SaveExploits0References4
Prion
Prion
added 2018/04/26 8:29 p.m.30 views

Buffer overflow

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

6.8CVSS5.4AI score0.00723EPSS
SaveExploits0References2Affected Software3
NVD
NVD
added 2018/04/26 8:29 p.m.54 views

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

6.8CVSS5.4AI score0.00723EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/04/26 8:00 p.m.42 views

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

5.5AI score0.00723EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2018/04/26 5:29 a.m.25 views

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

8.8CVSS7AI score0.03343EPSS
SaveExploits1References2
Snyk
Snyk
added 2018/04/26 5:29 a.m.6 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have...

8.8CVSS7.9AI score0.03343EPSS
SaveExploits1References3
OSV
OSV
added 2018/04/26 5:29 a.m.2 views

ALPINE-CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

8.8CVSS9AI score0.03343EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/26 5:29 a.m.4 views

DEBIAN-CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

8.8CVSS7.1AI score0.03343EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/26 5:29 a.m.6 views

UBUNTU-CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

8.8CVSS7AI score0.03343EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2018/04/26 5:00 a.m.35 views

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

8.8CVSS9.2AI score0.03343EPSS
SaveExploits1
CNVD
CNVD
added 2018/04/26 12:00 a.m.9 views

libvorbis Denial of Service Vulnerability (CNVD-2018-08909)

Xiph.Org libvorbis is an open source library of audio encoding and decoding functions for medium to high quality audio at fixed or variable bit rates. A heap-based buffer overflow vulnerability exists in the 'mapping0forward' function of the mapping0.c file in version 1.3.6 of Xiph.Org libvorbis,...

8.8CVSS8.9AI score0.03343EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/25 9:29 p.m.6 views

DEBIAN-CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

5.5CVSS4.9AI score0.01345EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/25 9:29 p.m.13 views

UBUNTU-CVE-2018-1338

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

5.5CVSS6.8AI score0.01953EPSS
SaveExploits0References4
OSV
OSV
added 2018/04/25 9:29 p.m.7 views

DEBIAN-CVE-2018-1339

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18...

5.5CVSS6.9AI score0.02608EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2018/04/25 9:00 p.m.52 views

CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

5.5CVSS4.7AI score0.01345EPSS
SaveExploits0
OSV
OSV
added 2018/04/25 6:29 p.m.13 views

CVE-2018-10209

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name...

5.4CVSS5.8AI score0.00614EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/04/25 6:00 p.m.32 views

CVE-2018-10209

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name...

5.2AI score0.00614EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2018/04/25 12:00 a.m.11 views

PT-2018-9755 · Vaultize · Vaultize Enterprise File Sharing

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered that allows for Stored XSS on the file or folder download pop-up. This occurs via a crafted file or folder name. Recommendations: For Vaultize Enterprise...

5.4CVSS5.2AI score0.00614EPSS
SaveExploits0References4
Rows per page
Query Builder