PT-2020-6213 · Openexr +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: An issue in OpenEXR is related to an off-by-one error in the use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read. This could potentially all...

PT-2019-4285 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to a memory leak in the Linux kernel, specifically in the ath9k wmi cmd function. This memory leak can be exploited by a remote attacker to cause a denial of service due ...

Debian DLA-1348-1 : patch security update

It was discovered that there was an input validation vulnerability in the patch1 utility where an ed1 script embedded in a regular input file could result in arbitrary code execution. This was reported by Rachel Kroll 0 et al. For Debian 7 'Wheezy', this issue has been fixed in patch version...

DEBIAN-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

PT-2016-6819 · None · Jwcrypto

Name of the Vulnerable Software and Affected Versions: jwcrypto versions prior to 0.3.2 Description: The issue concerns the RSA 1.5 algorithm implementation in jwa.py, which lacks the Random Filling protection mechanism. This makes it easier for remote attackers to obtain cleartext data via a...

Deep Discovery Inspector vulnerable to remote code execution

Overview Deep Discovery Inspector provided by Trend Micro Incorporated contains a remote code execution vulnerability. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Trend Micro Incorporated coordinated under the...

[security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04790231 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04790231 Version: 1 HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive...

SkyBlueCanvas CMS 1.1 r248-03 - Remote Command Execution

No description provided by source. Vulnerability in SkyBlueCanvas CMS Vulnerability Type: Remote Command Injection Version Affected: 1.1 r248-03 and probably prior versions Discovered by: Scott Parish - Center for Internet Security Vendor Information: SkyBlueCanvas is an easy-to-use Web Content...

solaris-fifofs.txt

/ 10/2007: public release SPARC Solaris 8 without 109454-06 Solaris 9 without 117471-04 Solaris 10 without 127737-01 x86 Solaris 8 without 109455-06 Solaris 9 without 117472-04 Solaris 10 without 127738-01 Solaris fifofs IPEEK Kernel Memory Disclosure By qaaz / include include include include...

Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14

Summary: Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14 http://www.goodtechsys.com/ Details: Input to the RCPT TO command is not properly checked and/or filtered. Issuing a single character 'A' as an argument to the RCTP TO command will cause the smtpd...

Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit

No description provided by source. / SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory: securitytracker.com/alerts/2005/Mar/1013385.html Application Risk:...

Sentinel LM 7.x - UDP License Service Remote Buffer Overflow

/ SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory: securitytracker.com/alerts/2005/Mar/1013385.html Application Risk: High Internet Risk: Medium UDP...

Solaris 2.5.1 (sparc) : 104736-06

SunOS 5.5.1: /usr/bin/csh patch. Date this patch was last updated by Sun : Feb/01/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

SSRT0758 Compaq Management Software Security Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NO RESTRICTION FOR DISTRIBUTION PROVIDED THE ADVISORY REMAINS INTACT TITLE: SSRT0758 Compaq Management Software Security Advisory Date Posted: September 28, 2001 c Copyright 2001 Compaq Computer Corporation. All rights reserved. Compaq Management...