PT-2018-9233

Name of the Vulnerable Software and Affected Versions: NASA Pyblock versions v1.0 through v1.3 Description: The issue is related to a CWE-502 vulnerability in the Radar data parsing library, which can result in remote code execution. This can be exploited via a victim opening a specially crafted...

UBUNTU-CVE-2018-6358

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...

PT-2018-17298

Name of the Vulnerable Software and Affected Versions Email Subscribers & Newsletters plugin versions prior to 3.4.8 Description An issue in the plugin allows an attacker to download a CSV data file containing all subscriber data by sending an HTTP POST request to a specific URI, /api endpoint:...

OracleVM 3.4 : microcode_ctl (OVMSA-2018-0003)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable early microcode load to allow updating Broadwell model 79 - Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Run dracut upon microcode update - Update Intel CPU microde fo...

Oracle Linux 6 : microcode_ctl (ELSA-2018-0013)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0013 advisory. 1:1.17-25.2 - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04 - Add amd microcodeamdfam17h.bin data file - Resolves: 1527357 1:1.17-25.1 - Update...

CVE-2017-7010

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "libxml2" component. It allows remote...

Buffer Overflow Vulnerability in Multiple Flexense Products

Flexense SyncBreeze Enterprise Client, Disk Sorter Enterprise Clien, and DiskBoss Enterprise Client are all products of Flexense Corporation, USA.Sync Breeze Enterprise Client is Sync Breeze Enterprise Client is a file synchronization solution; Disk Sorter Enterprise Clien is a file classificatio...

CVE-2017-5154: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

Blue Coat ProxyClient Installed (Mac OS X)

Binary data macosxbluecoatproxyclientinstalled.nbin...

PHP DoS

The cdfreadpropertyinfo function in the cdf.c library of the Fileinfo component of the PHP interpreter has a vulnerability that allows a malicious actor to trigger a service denial using a specially created CDF file...

jq: heap-buffer-overflow in tokenadd() function

A heap-based buffer overflow flaw was found in jq's tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system...

jq: heap-buffer-overflow in tokenadd() function

A heap-based buffer overflow flaw was found in jq's tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system...

libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents...

CVE-2015-7370: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and...

PT-2015-7533

Name of the Vulnerable Software and Affected Versions Open Flash Chart 2 Revive Adserver versions prior to 3.2.2 CA Release Automation versions prior to 5.0.2-227 CA Release Automation versions prior to 5.5.1-1616 CA Release Automation versions prior to 5.5.2-434 CA Release Automation versions...

Amazon Linux AMI : grep (ALAS-2015-598)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way grep parsed large lines of data. An attacker able to trick a user into running grep on a specially crafted data file could use this flaw to crash grep or, potentially, execute arbitrary code with the privilege...

grep: Integer overflow leading to heap-based buffer-overflow when reading large lines

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way grep parsed large lines of data. An attacker able to trick a user into running grep on a specially crafted data file could use this flaw to crash grep or, potentially, execute arbitrary code with the privilege...

CVE-2014-8390

Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a 1 CFG or 2 DAT file...

Multiple Cross-Site Scripting Vulnerabilities in amMap

amMap is a map component developed by amCharts. Version 2.6.3 of amMap contains multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the datafile or settingsfile parameter of ammapswf...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the 1 datafile or 2 settingsfile parameter to ammap.swf, or 3 the datafile parameter to amtimeline.swf...