Lucene search
+L

255 matches found

Veracode
Veracode
added 2017/05/23 1:45 a.m.33 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered by running a RLE image through coders/rle.c and leveraging a flaw in the end of file handling...

6.5CVSS7.2AI score0.01851EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2017/05/22 2:29 p.m.3 views

DEBIAN-CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...

6.5CVSS6.8AI score0.01851EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/05/22 12:0 a.m.22 views

FreeBSD : asterisk -- Memory exhaustion on short SCCP packets (fab87bff-3ce5-11e7-bf9d-001999f8d30b)

The Asterisk project reports : A remote memory exhaustion can be triggered by sending an SCCP packet to Asterisk system with 'chanskinny' enabled that is larger than the length of the SCCP header but smaller than the packet length specified in the header. The loop that reads the rest of the packe...

5.5AI score
SaveExploits0References2
OSV
OSV
added 2017/05/22 12:0 a.m.3 views

UBUNTU-CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...

6.5CVSS6.7AI score0.01851EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/22 4:59 p.m.3 views

DEBIAN-CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

7.5CVSS7.8AI score0.01956EPSS
SaveExploits0References1
OSV
OSV
added 2017/03/22 4:59 p.m.3 views

UBUNTU-CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

7.5CVSS7.2AI score0.01956EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2015/12/07 8:46 p.m.8 views

jsoup: XSS vulnerability related to incomplete tags at EOF

It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...

6.1CVSS7.6AI score0.02177EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/12/07 8:46 p.m.5 views

jsoup: XSS vulnerability related to incomplete tags at EOF

It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...

6.1CVSS7.6AI score0.02177EPSS
SaveExploits0References4
OSV
OSV
added 2015/03/31 2:59 p.m.5 views

DEBIAN-CVE-2015-2754

FreeXL before 1.0.0i allows remote attackers to cause a denial of service stack corruption and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."...

6.8CVSS7.8AI score0.0334EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2014/05/19 11:10 a.m.6 views

libxml2: Out-of-bounds read via a document that ends abruptly

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...

5CVSS6.8AI score0.04733EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2012/01/20 12:0 a.m.31 views

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the...

9.3CVSS8.7AI score0.0531EPSS
SaveExploits3References6
Ubuntu
Ubuntu
added 2012/01/19 8:53 p.m.72 views

USN-1334-1: libxml2 vulnerabilities

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the...

9.3CVSS8.8AI score0.0531EPSS
SaveExploits3
OSV
OSV
added 2007/07/14 12:30 a.m.4 views

DEBIAN-CVE-2007-3644

archivereadsupportformattar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service infinite loop via 1 an end-of-file condition within a pax extension header or 2 a malformed pax extension header in an a PAX or a b TAR archive...

4.3CVSS6.9AI score0.03919EPSS
SaveExploits0References1
OSV
OSV
added 2007/07/14 12:30 a.m.10 views

CVE-2007-3644

archivereadsupportformattar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service infinite loop via 1 an end-of-file condition within a pax extension header or 2 a malformed pax extension header in an a PAX or a b TAR archive...

6.4AI score
SaveExploits0References20
myhack58
myhack58
added 2006/05/14 12:0 a.m.29 views

How in does not support the Upload file to the forum file upload-vulnerability warning-the black bar safety net

How in the does not support file upload Forum, Upload File To achieve this goal, there is a prerequisite for this forum to be able to upload pictures. Commonly used Picture format is generally as JPEG, this format is FFD9 as the end-of-file Mark, as to which after the Deposit of anything on the...

7AI score
SaveExploits0
Rows per page
Query Builder