sox: NULL pointer dereference in startread function in xa.c

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function

REJECTED CVE A stack-based buffer overflow vulnerability was identified in EDK-2 within the MakeTable function of BaseUefiDecompressLib.c, TianoCompress.c, and the UEFI specification. An authenticated attacker could exploit this vulnerability by supplying a crafted file, potentially leading to...

GHSA-4MQ5-MJ59-QQ9C Allocation of Resources Without Limits or Throttling in Apache Tika

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later...

DEBIAN-CVE-2019-10093

In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later...

UBUNTU-CVE-2019-14442

In mpc8readheader in libavformat/mpc8.c in Libav 12.3, an input file can result in an avioseek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file...

UBUNTU-CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

VLC Media Player Integer Underflow Vulnerability (Jul 2019) - Windows

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player 'libebml' Library Heap Overflow Vulnerability (Jul 2019) - Windows

VLC Media Player is prone to a heap-based buffer over-read vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Integer Underflow Vulnerability (Jul 2019) - Mac OS X

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2019-12256 · Netfilter +1 · Netfilter / Iptables +1

Name of the Vulnerable Software and Affected Versions: netfilter iptables version 1.8.2 Description: A buffer overflow issue exists, potentially allowing an attacker to crash the program or gain code execution through a specially crafted file. This issue is related to the add param to argv functi...

Cisco Email Security Appliance AsyncOS Software Remote Security Bypass Vulnerability

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. A remote security bypass vulnerability exists in the GZIP decompression engine of AsyncOS Software in the Cisco ESA, which stems from the program...

Cisco Integrated Management Controller Buffer Overflow Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A buffer...

The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

Leanify Buffer Overflow Vulnerability

Leanify is a lightweight file lossless compression program. Leanify suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which could crash the application or execute arbitrary code...

[SECURITY] [DLA 1795-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u7 CVE ID : CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473 The WriteMATLABImage function coders/mat.c is affected by a...

CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

GHSA-RJX9-2936-9FFX Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient...

Memory misreference vulnerability in libpng 'png_image_free' function

libpng is a PNG reference library that can create, read and write PNG graphics files. A memory misreference vulnerability exists in the 'pngimagefree' function of the png.c file in libpng version 1.6.36. An attacker can exploit this vulnerability to cause a denial of service with the help of...

Vulnerability of the graphical components of the Microsoft Office software suite, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Office’s graphical components is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...