587 matches found
USN-1587-1: libxml2 vulnerability
Juri Aedla discovered that libxml2 incorrectly handled certain memory operations. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the...
Ubuntu Update for libpng USN-1417-1
Ubuntu Update for Linux kernel vulnerabilities USN-1417-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14171.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libpng USN-1417-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
USN-1417-1: libpng vulnerability
It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the...
Ubuntu Update for subversion vulnerabilities USN-1053-1
Ubuntu Update for Linux kernel vulnerabilities USN-1053-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10531.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for subversion vulnerabilities USN-1053-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
USN-1053-1: Subversion vulnerabilities
It was discovered that Subversion incorrectly handled certain 'partial access' privileges in rare scenarios. Remote authenticated users could use this flaw to obtain sensitive information revision properties. This issue only applied to Ubuntu 6.06 LTS. CVE-2007-2448 It was discovered that the...
Design/Logic Flaw
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service EMS 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted requests that control loop operations related to memory...
Server side request forgery (ssrf)
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control OPC interface, probably related to free operations on arbitrary...