3303 matches found
CVE-2018-14401
CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read...
HTSlib Arbitrary File Overwrite Vulnerability
HTSlib is a library written in C for accessing high-throughput sequencing data such as SAM, CRAM and VCF. A competitive condition vulnerability exists in the cram/cramio.c file in HTSlib version 1.8. An attacker can exploit this vulnerability by performing a symbolic link attack to overwrite...
CVE-2018-12371
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 60.1, Thunderbird 60, an...
CVE-2018-5095
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...
CVE-2017-16099
The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition...
CVE-2017-0930
augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path...
CVE-2016-10686
fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the...
CVE-2016-10542
ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier...
UBUNTU-CVE-2018-11233
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...
PT-2018-10663 · Little Cms +1 · Little Cms +1
Name of the Vulnerable Software and Affected Versions: Little CMS version 2.9 Description: The issue is related to an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a. This can be triggered via a crafted TIFF file. However, it's noted that the Little CMS develope...
UBUNTU-CVE-2018-11499
A use-after-free vulnerability exists in handleerror in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service application crash or possibly unspecified other impact...
CVE-2018-11367
An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module...
GNU C Library Denial of Service Vulnerability (CNVD-2018-09998)
The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in the 'memmove' function in the GNU C Library versions 2.21 through 2.27, which stems from the failure of the...
USN-3650-1 xdg-utils vulnerability
It was discovered that xdg-utils incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code...
Uninitialized Buffer Allocation
base64-url is vulnerable to uninitialized buffer allocation. The library contains an uninitialized memory allocation when handling a large number, which can allow a malicious user to gain access to sensitive information or crash the application...
[ASA-201805-10] firefox: multiple issues
Arch Linux Security Advisory ASA-201805-10 ========================================== Severity: Critical Date : 2018-05-13 CVE-ID : CVE-2018-5150 CVE-2018-5151 CVE-2018-5152 CVE-2018-5153 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5160 CVE-2018-5163 CVE-2018-51...
DEBIAN-CVE-2018-10963
The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...
CVE-2018-2419
SAP Enterprise Financial Services SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...