CVE-2019-15136

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

CVE-2019-15135

The handshake protocol in Object Management Group OMG DDS Security 1.1 sends cleartext information about all of the capabilities of a participant including capabilities inapplicable to the current session, which makes it easier for attackers to discover potentially sensitive reachability...

CVE-2019-15135

The CVE-2019-15135 issue is in the handshake protocol of OMG DDS Security 1.1, which transmits cleartext information about a participant’s capabilities (including session-inapplicable ones). This leakage enables an attacker to discover potentially sensitive reachability information on a DDS netwo...

CVE-2019-15135: Cleartext Transmission of Sensitive Information

The handshake protocol in Object Management Group OMG DDS Security 1.1 sends cleartext information about all of the capabilities of a participant including capabilities inapplicable to the current session, which makes it easier for attackers to discover potentially sensitive reachability...

PT-2019-14008

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, where fnmatch pattern matches are performed with topic name strings instead of permission expressions. This can result i...

PT-2019-14006

Name of the Vulnerable Software and Affected Versions OMG DDS Security version 1.1 Description The handshake protocol in OMG DDS Security sends cleartext information about all participant capabilities, making it easier for attackers to discover potentially sensitive reachability information on a...

PT-2019-14007

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, which fails to check partition permissions from remote participant connections. This can result in a policy bypass for a...

CVE-2019-15136: Missing Authorization

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

dds-steentapijt.be XSS vulnerability

Open Bug Bounty ID: OBB-700925 Description| Value ---|--- Affected Website:| dds-steentapijt.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

ImageMagick Denial of Service Vulnerability (CNVD-2018-00589)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadDDSInfo function in coders/dds.c in ImageMagick 7.0.7-12 Q16. An attacker can exploit this vulnerability to cause a...

DEBIAN-CVE-2017-1000476

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service...

UBUNTU-CVE-2017-1000476

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service...

IrfanView buffer overflow vulnerability (CNVD-2017-32380)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. A remote attacker can exploit this...

CVE-2017-15769

IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLPW+0x0000000000001b22."...

Design/Logic Flaw

IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLPW+0x0000000000001b22."...

CVE-2017-15769

IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLPW+0x0000000000001b22."...

CVE-2017-15769

Summary: CVE-2017-15769 affects IrfanView 4.50 (64-bit). A crafted .dds file can cause a denial of service and may have unspecified other impact, linked to a Read Access Violation starting at FORMATS!ReadBLP_W. Concrete exploitation details are not provided in the documents, but multiple sources ...

CVE-2017-15769: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLPW+0x0000000000001b22."...

PT-2017-14200

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP W+0x0000000000001b22."...

dds.uevora.pt XSS vulnerability

Vulnerable URL: http://www.dds.uevora.pt/pesquisa/resultado?query=" onmouseover="prompt%2FOPENBUGBOUNTY%2F Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...