4503 matches found
tinyexr buffer overflow vulnerability (CNVD-2018-14428)
tinyexr is a small OpenEXR image load/save library. A buffer overflow vulnerability exists in the 'tinyexr::DecodePixelData' function of the tinyexr.h file in version 0.9.5 of tinyexr. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Remediation There is no fixed version for tinyexr. References - GitHub Issue...
[SECURITY] Fedora 27 Update: nodejs-base64-url-2.2.0-1.fc27
Base64 encode, decode, escape and unescape for URL applications...
[SECURITY] Fedora 28 Update: nodejs-base64-url-2.2.0-1.fc28
Base64 encode, decode, escape and unescape for URL applications...
Mcard Mobile Card Selling Platform 1 Cross Site Request Forgery
Exploit Title: Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery Date: 2018-05-23 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/mcard-mobile-card-selling-platform/19307193?srank=15 Version: 1 Tested on: Kali linux POC : CSRF POC document.forms0.submit;...
MiniUPnP ngiflib DecodeGifImg' Function Denial of Service Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability exists i...
HDF5 Out-of-Bounds Read Vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. An out-of-bounds read vulnerability exists in the 'H5Ofillnewdecode' and 'H5Ofillolddecode' functions of the H5Ofill.c file in...
HDF5 'H5D__btree_decode_key' function divide by zero error vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Dbtreedecodekey' function in the H5Dbtree.c file in HDF5 version 1.10.2. A remote...
DEBIAN-CVE-2018-11206
An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...
UBUNTU-CVE-2018-11203
A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...
DEBIAN-CVE-2018-11203
A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...
UBUNTU-CVE-2018-11206
An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...
PT-2018-10393
Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.2 Description A division by zero issue was found in the H5D btree decode key function in H5Dbtree.c. This could potentially allow a remote denial of service attack. Recommendations For version 1.10.2, consider updating to a...
PT-2018-10396 · Hdf +2 · Hdf5 +2
Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.2 Description: An out of bounds read was discovered in the H5O fill new decode and H5O fill old decode functions in the H5Ofill.c file of the HDF5 library. This issue could allow a remote denial of service or information...
qpid-proton/fuzz-message-decode: Heap-buffer-overflow in pni_decoder_decode_value
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=5311329584807936 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-message-decode Fuzz target binary: fuzz-message-decode Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...
MiniUPnP ngiflib Denial of Service Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability in the...
DEBIAN-CVE-2016-9601
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...
CVE-2016-9601
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...
Ffmpeg Denial of Service Vulnerability (CNVD-2018-08557)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeinit' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.2 and earlier versions. A remote attacker can exploit this vulnerability to...
