3274 matches found
phpMyFAQ inc/PMF/Faq.php file cross-site scripting vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in th...
CVE-2017-7608
The eblobjectnotetypename function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...
SUSE-SU-2017:0945-1 Security update for gimp
This update for gimp fixes the following issues: This security issue was fixed: - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero bsc1032241. These non-security issues were fixed: - bsc1025717: Prefer...
Apache Ambari Remote Code Execution Vulnerability
Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Software Foundation in the United States. The tool supports visualization and analysis of jobs and task execution, support for system alerts, etc. Ambari Agent is used as one of the...
CVE-2017-5509
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...
ImageMagick palm file denial of service vulnerability
ImageMagick is a set of open source image processing software. A security vulnerability exists in ImageMagick. An attacker can exploit the vulnerability by submitting a special palm file to trick the application into parsing it, crashing the application...
CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...
CVE-2016-4949
CVE-2016-4949 affects Cloudera Manager 5.5 and earlier. A remote attacker could obtain sensitive information by manipulating the filename parameter in the logs endpoint /cmf/process//logs, supplying either “stderr.log” or “stdout.log”. The underlying issue is an information disclosure in the proc...
CVE-2016-10070
Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...
CVE-2017-5867
CVE-2017-5867 affects ownCloud Server prior to 8.1.11, 8.2.x prior to 8.2.9, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3. The issue allows remote authenticated users to cause a denial of service (server hang and logfile flooding) by uploading a one-bit BMP file. Connected documents confirm thi...
CVE-2016-10095
Stack-based buffer overflow in the TIFFVGetField function in tifdir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service crash via a crafted TIFF file...
tnef 'parse_file()' function denial of service vulnerability
tnef is a set of programs for decompressing MIME attachments. A security vulnerability in the tnef 'parsefile' function allows an attacker to exploit the vulnerability to submit a special file for a denial-of-service attack that could crash the application...
CVE-2016-5033
The printexprloccontent function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-8944
CVE-2016-8944 affects IBM AIX 7.1 and 7.2 where a local user can open a file with a crafted argument causing the system to crash (local DoS). The issue is tied to the sysproc component and is addressed by APARs IV91488, IV91487, IV91456, and IV90234, with vulnerable filesets including bos.mp64 on...
DEBIAN-CVE-2016-5102
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...
Heap overflow
The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service out-of-bounds heap read via a file containing an "unterminated" string...
CVE-2016-6163
The rsvgpatternfixfallback function in rsvg-paintserver.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted svg file...