CVE-2016-6836

The vmxnet3completepacket function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcqdescr object...

CVE-2016-6836

The vmxnet3completepacket function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcqdescr object...

shopify-scripts: Segmentation fault when a Ruby method is invoked by a C method via Object#send

We can arrange for C to call Objectsend by aliasing it over initialize. This will cause Classnew a C function to call initialize which is actually Objectsend with arbitrary arguments. If we invoke a Ruby method through Objectsend, mruby segfaults: def foo end class X aliasmethod :initialize, :sen...

PT-2016-7455

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.21 Description The issue allows remote attackers to bypass the SAFER mode protection mechanism, which could lead to the execution of arbitrary code. This is achieved by leveraging type confusion in the initializ...

CVE-2016-6836

The vmxnet3completepacket function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcqdescr object...

PT-2016-3920

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics versions 19 through 20 before 20.0.0.2-IF0008 IBM SPSS Statistics version 21 before 21.0.0.2-IF0010 IBM SPSS Statistics version 22 before 22.0.0.2-IF0011 IBM SPSS Statistics version 23 before 23.0.0.3-IF0001 IBM SPSS...

CVE-2015-8530: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitra...

CVE-2015-7541: Improper Neutralization of Special Elements used in a Command

The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the 1 imagepath, 2 colors, or 3 depth variable...

PT-2016-1114

Name of the Vulnerable Software and Affected Versions colorscore gem versions prior to 0.0.5 Description The issue is related to the initialize method in the Histogram class, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in the image path, colors, or...

phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affect...

IP2location.dll 1.0.0.1 - Function Initialize() Buffer Overflow

No description provided by source. html head titleIP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r/title /head body object classid='clsid:A3C8BFFA-1496-4188-A2BC-355A0B3DA0A7' id='ip2location'/object script language=JavaScript / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow...

UBUNTU-CVE-2013-6638

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the 1...

Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access

This Metasploit module exploits a vulnerability on Microsoft Silverlight. The vulnerability exists on the Initialize method from System.Windows.Browser.ScriptObject, which access memory in an unsafe manner. Since it is accessible for untrusted code user controlled it's possible to dereference...

DEBIAN-CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

Directory traversal

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management ZCM 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls th...

CVE-2013-0717

Multiple cross-site request forgery CSRF vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that 1...

MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access

This module exploits a vulnerability in Microsoft Silverlight. The vulnerability exists on the Initialize method from System.Windows.Browser.ScriptObject, which access memory in an unsafe manner. Since it is accessible for untrusted code user controlled it's possible to dereference arbitrary memo...

SuSE 11 / 11.1 Security Update : ghostscript (SAT Patch Numbers 2708 / 2709)

This update for ghostscript fixes the following security issues : - Specially crafted postscript .ps files can cause buffer overflows in ghostscript that could potentially be exploited to execute arbitrary code. CVE-2010-1869 / CVE-2010-1628 / CVE-2009-4270 - By default, ghostscript reads certain...

PT-2010-5314

Name of the Vulnerable Software and Affected Versions DATAC RealWin versions 2.0 Build 6.1.8.10 and earlier DATAC RealWin version 1.06 Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers. This can lead to a denial of service, causing...

Phpcms 2 0 0 8 query.php SQL injection vulnerability and repair programme-vulnerability warning-the black bar safety net

Affected version: Phpcms 2 0 0 8 vulnerability description: In the file the ask/query. php: case 'editanswer': //paragraph 3, line 9 if$dosubmit ifstrlen$answertext 1 0 0 0 0 showmessage'answer the number of words cannot exceed 1 0 0 0 0 characters'; $posts'message' = $M'useeditor' ? $answertext ...