DEBIAN-CVE-2017-11534

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the litefontmap function in coders/wmf.c...

UBUNTU-CVE-2017-11534

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the litefontmap function in coders/wmf.c...

Blackcat CMS Cross-Site Scripting Vulnerability (CNVD-2017-24891)

BlackCat CMS is a content management system CMS based on PHP5 and HTML5 developed by Black Cat team. A cross-site scripting vulnerability exists in Blackcat CMS version 1.2. A remote attacker can inject arbitrary web script or HTML by sending the 'maplanguage' parameter to the file...

CVE-2017-9609

Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...

CVE-2017-1000043

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control...

Cross site scripting

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control...

The vulnerability of the grant-table component in the Xen hypervisor allows a attacker to trigger a service failure or gain privileged access to the host.

The vulnerability of the grant-table component in the Xen hypervisor is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap. Exploiting this vulnerability could allow a malicious actor to trigger a service failure memory corruption or gain privileged access to the host...

The vulnerability of Xen hypervisors allows a attacker to trigger a service failure or gain privileged access to the host.

The vulnerability of Xen hypervisors is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap provided that GNTMAPhostmap is in the unmapping mode. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption or gain privileged...

CVE-2017-1000043

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control...

CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

Counter Strike: Condition Zero - '.BSP' Map File Code Execution

!/usr/bin/env python Counter Strike: Condition Zero BSP map exploit By @DigitalCold Jun 11, 2017 E-DB Note: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42325.zip bsp-exploit-source.zip from binascii import hexlify, unhexlify from struct import pack, unpack...

UBUNTU-CVE-2017-10921

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAPdevicemap and GNTMAPhostmap mapping, which allows guest OS users to cause a denial of service count mismanagement and memory corruption or obtain privileged host OS access, aka XSA-224 bug 2...

ALPINE-CVE-2017-10921

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAPdevicemap and GNTMAPhostmap mapping, which allows guest OS users to cause a denial of service count mismanagement and memory corruption or obtain privileged host OS access, aka XSA-224 bug 2...

DEBIAN-CVE-2017-10921

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAPdevicemap and GNTMAPhostmap mapping, which allows guest OS users to cause a denial of service count mismanagement and memory corruption or obtain privileged host OS access, aka XSA-224 bug 2...

Xen grant-table function denial of service vulnerability (CNVD-2017-21748)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. The Xen grant-table feature fails to properly handle the mapping of GNTMAPdevicemap and GNTMAPhostmap, allowing an attacker to exploit a vulnerability by submitting a special...

inidaho.com XSS vulnerability

Vulnerable URL: http://www.inidaho.com/adventurealley/HotSpringsMap.asp?Identify=1"...

roundtablepizza.com XSS vulnerability

Vulnerable URL: http://www.roundtablepizza.com/rtp/finderlocationmap.asp?distance=15=92129=32.9657005%20=1"...

Google Chrome - Out-of-Bounds Access in RegExp Stubs

Google Chrome - Out-of-Bounds Access in RegExp Stubs There is an out-of-bounds access in RegExp.prototype.exec and RegExp.prototype.test. The code defined in BranchIfFastRegExp checks whether a regular expression object has the default map, however, it is possible to alter the map after this chec...

CVE-2017-9865

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc...

RHEL 7 : kernel (RHSA-2017:1615)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1615 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw was found in the way Linux kern...