7747 matches found
Intel Content Protection HECI Service - Type Confusion Privilege Escalation Exploit
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege Summary: The Intel Content...
Memory leak vulnerability in multiple Huawei products (CNVD-2017-37732)
Huawei AR120-S and others are router products from Huawei China. A memory leak vulnerability exists in multiple Huawei products due to a program failing to properly free allocated memory for processing messages. A remote attacker could exploit the vulnerability by sending specially crafted H323...
Null Pointer Reference Vulnerability in Multiple Huawei Products
Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...
undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS
It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...
CVE-2017-1000407
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic...
Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products
Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...
IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38287)
Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...
Multiple Huawei Products IKEv2 Protocol Memory Out-of-Bounds Access Vulnerability
Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37976)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...
Debian DLA-1191-1 : python-werkzeug security update
A security issue that allows XSS on the Werkzeug debugger allows remote attackers to inject arbitrary stuff via a field that contains an exception message. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.3+dfsg-1+deb7u1. We recommend that you upgrade your python-werkzeug...
FreeBSD : mediawiki -- multiple vulnerabilities (298829e2-ccce-11e7-92e4-000c29649f92)
mediawiki reports : security fixes : T128209: Reflected File Download from api.php. Reported by Abdullah Hussam. T165846: BotPasswords doesn't throttle login attempts. T134100: On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password. T178451:...
CVE-2017-1000187
In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...
CVE-2017-1000174
In SWFTools, an address access exception was found in swfdump swfGetBits...
Code injection
In SWFTools, an address access exception was found in swfdump swfGetBits...
CVE-2017-1000174
In SWFTools, an address access exception was found in swfdump swfGetBits...
CVE-2017-1000187
In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...
CVE-2017-1000174
CVE-2017-1000174 concerns SWFTools where an address access exception is triggered in swfdump swf_GetBits(). The issue affects SWFTools components handling SWF data and is described across multiple sources (NVD entry, Red Hat, SUSE, Ubuntu OSV, CNVD) as a vulnerability in swfdump swf_GetBits(), wi...
