9856 matches found
CVE-2018-9923
An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...
kernel: Arbitrary stack overwrite causing oops via crafted signal frame
A flaw was found in the Linux kernel's handling of signal frame on PowerPC systems. A malicious local user process could craft a signal frame allowing an attacker to corrupt memory...
idreamsoft iCMS Cross-Site Request Forgery Vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the admincp.php file in idreamsoft iCMS 7.0.7 and earlier versions. A remote attacker can exploit this vulnerability by sending an...
idreamsoft iCMS SQL Injection Vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in idreamsoft iCMS 7.0.7 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'pid' array parameter in the...
PT-2018-19091
Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.8 Description An issue exists where CSRF is present in the admincp.php file. This can be demonstrated by adding an article via the "app=article&do=save&frame=iPHP" request to the "/admincp.php" endpoint,...
CVE-2017-13249
In impeg2dapisetdisplayframe of impeg2dapimain.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,...
CVE-2017-3967
Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...
Google Android libframesequence Denial of Service Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. libframesequence is a library of GIF image tools. A denial of service vulnerability exists in the 'FrameSequencegif::FrameSequencegif' function of libframesequence in Android, whi...
nghttp2 -- Denial of service due to NULL pointer dereference
nghttp2 blog: If ALTSVC frame is received by libnghttp2 and it is larger than it can accept, the pointer field which points to ALTSVC frame payload is left NULL. Later libnghttp2 attempts to access another field through the pointer, and gets segmentation fault. ALTSVC frame is defined by RFC 7838...
Buffer overflow
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur...
CVE-2017-15822
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur...
[SECURITY] Fedora 26 Update: libvncserver-0.9.11-3.fc26
LibVNCServer makes writing a VNC server or more correctly, a program expor ting a frame-buffer via the Remote Frame Buffer protocol easy. It hides the programmer from the tedious task of managing clients and compression schemata...
CVE-2017-15822: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2018-08465)
Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android N is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the versioning service of Samsung mobile devices usi...
PT-2018-5993
Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: A buffer overflow may...
CVE-2017-15822
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur...
[SECURITY] Fedora 28 Update: libvncserver-0.9.11-6.fc28
LibVNCServer makes writing a VNC server or more correctly, a program expor ting a frame-buffer via the Remote Frame Buffer protocol easy. It hides the programmer from the tedious task of managing clients and compression schemata...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
Buffer overflow
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...