Design/Logic Flaw

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

UBUNTU-CVE-2017-15535

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

CVE-2017-15535

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

CVE-2017-15535

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

CVE-2017-15535

Removed by vendor...

CVE-2017-15535

CVE-2017-15535 affects MongoDB 3.4.x before 3.4.10 and 3.5.x-development in the wire protocol compression feature (networkMessageCompressors), which is disabled by default but if enabled can allow a remote attacker to cause a denial of service or modify memory. Public advisories and updates exist...

CVE-2017-15535

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

CVE-2017-15535: Undefined Security Weakness

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors aka wire protocol compression, which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory...

PT-2017-14091

Name of the Vulnerable Software and Affected Versions MongoDB versions 3.4.x through 3.4.9 MongoDB versions 3.5.x-development Description The issue is related to a configuration setting, networkMessageCompressors, which is disabled by default. When enabled, it exposes a potential problem that cou...

DEBIAN-CVE-2017-13721

In X.Org Server aka xserver and xorg-server before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session...

Creolabs Gravity Double Release Vulnerability

Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A double release vulnerability exists in gravityvalue in Creolabs Gravi...

Double free

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

CVE-2017-1000072: Double Free

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

CVE-2017-1000072

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

CVE-2017-1000072

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

PT-2017-10779

Name of the Vulnerable Software and Affected Versions Creolabs Gravity version 1.0 Description The issue is related to a Double Free in gravity value, which could potentially lead to the modification of unexpected memory locations. Recommendations For Creolabs Gravity version 1.0, at the moment,...

CVE-2016-8360

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...

Double free

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...

CVE-2016-8360

CVE-2016-8360 affects Moxa SoftCMS Webserver in versions before 1.6. A specially crafted URL request can trigger a double-free condition, enabling memory corruption that could lead to denial of service or arbitrary code execution. Severity is high (CVSSv3 base 8.1) with network access required an...

CVE-2016-8360

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...