libxls out-of-bounds write vulnerability (CNVD-2017-37753)

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the readMSAT function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

Libxls Code Execution Vulnerability

libxls is a C library that can read Excel xls files. A code execution vulnerability exists in the xlsaddCell function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

DEBIAN-CVE-2017-12608

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

GNU Libextractor Denial of Service Vulnerability (CNVD-2017-32360)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORnsfeextractmethod' function in the plugins/nsfeextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to...

GNU Libextractor Heap Buffer Overflow Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A heap-based buffer overflow vulnerability exists in the 'EXTRACTORpngextractmethod' function in the plugins/pngextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this...

Kanboard Design Vulnerability (CNVD-2017-30950)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

D-Link DIR-850L REV.A and REV.B Denial of Service Vulnerabilities

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions, and firmware FW208WWb02 and prior versions. A remote attacker could exploit th...

Lemur has an unspecified vulnerability

Lemur is a Python based TLS certificate management tool. A security vulnerability exists in Lemur version 0.1.4, which stems from the program's failure to use a random IV when encrypting AES.No detailed information about the vulnerability is currently available...

OpenExif 'ExifJpegHUFFTable::deriveTable' function denial of service vulnerability

OpenExif is an object-oriented library for accessing image files in Exif format. A security vulnerability exists in the 'ExifJpegHUFFTable::deriveTable' function of the ExifHuffmanTable.cpp file in OpenExif version 2.1.4. A remote attacker can exploit this vulnerability to cause a denial of servi...

BUFFALO WAPM-1166D and WAPM-APG600H Cross-Site Request Forgery Vulnerabilities

The BUFFALO WAPM-1166D and WAPM-APG600H are both wireless LAN access point devices from BUFFALO Japan. A cross-site request forgery vulnerability exists in the WMR-433 using firmware version 1.02 and earlier and the WMR-433W using firmware version 1.40 and earlier. A remote attacker could exploit...

PCWAP enterprise mobile website source code v1.4.0 suffers from stored cross-site scripting vulnerability

PCWAP enterprise mobile website source code is a set of cell phone website and PC website with the same background management of free PHP enterprise cell phone building system. PCWAP enterprise mobile website source code v1.4.0 '/pcwap1.4.0/Tpl/Admin/Message/index.html' file exists to store...

CVE-2017-8403

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application...

CVE-2017-2090

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

PHP Denial of Service Vulnerability (CNVD-2017-06133)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

PT-2017-18030 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions through 7.1.4 Description: The issue allows attackers to cause a denial of service via operations on long strings, resulting in memory consumption and application crash. The vendor disputes this, stating that GMP safely aborts in...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

libcsp library buffer overflow vulnerability (CNVD-2016-10598)

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the zmq interface in the cspifzmqhub.c file in libcsp library v1.4 and earlier versions, which can be exploited by an attacker...

libcsp library buffer overflow vulnerability (CNVD-2016-10597)

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspsfprecvfp function in the cspsfp.c file in libcsp library v1.4 and earlier versions, which can be exploited by an...

libcsp library buffer overflow vulnerability

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspcanprocessframe in the cspifcan.c file in libcsp library v1.4 and earlier. An attacker can exploit this vulnerability t...

PT-2016-7514 · Libcsp · Libcsp

Name of the Vulnerable Software and Affected Versions: libcsp library version 1.4 and earlier Description: The issue is related to a buffer overflow in the csp can process frame function in csp if can.c. This allows hostile components connected to the canbus to execute arbitrary code by sending a...