152 matches found
CVE-2014-2652
OpenScape Deployment Service (DLS) vulnerability CVE-2014-2652 in multiple Unify/OpenScape deployments. The issue is a SQL injection in DLS before version 6.x and before 7.x R1.11.3, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component/version de...
CVE-2014-2652: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Google Android sonivox library DLSParser denial of service vulnerability
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA. sonivox library is a digital music library. dlsparser is a DLS parser. A denial of service vulnerability exists in the DLSParser of the sonivox library in Android. A remote attacker can...
libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities
Exploit for linux platform in category dos / poc Introduction: ============= https://www.linuxsampler.org/libgig/ libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS Downloadable Sounds Level 1/2 files, KORG sample based instruments .KSF and .KM...
CVE-2015-3836
The Parsewave function in arm-wt-22k/libsrc/easmdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted XMF...
Buffer overflow
The Parsewave function in arm-wt-22k/libsrc/easmdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted XMF...
CVE-2015-3836
The CVE-2015-3836 entry concerns Android devices affected by a buffer overflow in the Sonivox Parse_wave routine (arm-wt-22k/lib_src/eas_mdls.c) used by the DLS-to-EAS converter. The issue arises because a negative value in a size field is not rejected, enabling remote attackers to execute arbitr...
CVE-2015-3836: Undefined Security Weakness
The Parsewave function in arm-wt-22k/libsrc/easmdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted XMF...
CVE-2015-3836
The Parsewave function in arm-wt-22k/libsrc/easmdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted XMF...
CVE-2006-1578
CVE-2006-1578 affects Keystone Digital Library Suite (DLS) up to version 1.5.4. The vulnerability is an SQL injection in the subject_type_id parameter on both the index page and the search module, allowing remote attackers to execute arbitrary SQL commands. The available documents do not provide ...
CVE-2006-1578: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Keystone Digital Library Suite DLS 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subjecttypeid parameter in 1 the index page and 2 the search module...
