7109 matches found
ALPINE-CVE-2019-14973
TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash...
spice-gtk security and bug fix update
libgovirt 0.3.4-2 - Parse XML nodes automatically Related: rhbz1427467 - Set detailed error message for async call Related: rhbz1427467 spice-gtk 0.35-4 - Fix bad channel-reset on usbredir Resolves: rhbz1625550 0.35-3 - Fix insufficient encoding checks for LZ Resolves: rhbz1598652 spice-vdagent...
The vulnerabilities of the functions virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() in the Libvirt management library allow a attacker to execute arbitrary code or escalate their privileges.
The vulnerabilities of the functions virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU in the Libvirt management library are due to access control errors. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or increase their privileges...
UBUNTU-CVE-2017-18509
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inetcsklistenstop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue...
chromium-browser: Object leak of utility functions
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibl...
Directory Traversal
LibreOffice is vulnerable to directory traversal. Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning...
Denial Of Service (Dos)
binutils is vulnerable to denial of service. Stack Exhaustion in the demangling functions allow an attacker to crash the application during execution of nm-new...
CVE-2019-1934
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...
CVE-2019-1934
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...
Authorization
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...
CVE-2019-1934 Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...
PYSEC-2019-44
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...
FANUC 18-MB Control System
Binary data 764772.prm...
nss: NULL pointer dereference in several CMS functions resulting in a denial of service
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
Denial Of Service (DoS)
github.com/docker/docker-credential-helpers is vulnerable to denial of service DoS. The vulnerability exists through a double free issue in the List functions...
CVE-2019-1020014
docker-credential-helpers before 0.6.3 has a double free in the List functions...
DEBIAN-CVE-2019-1020014
docker-credential-helpers before 0.6.3 has a double free in the List functions...