4274 matches found
Poppler Buffer Overflow Vulnerability (CNVD-2018-14229)
Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. A buffer overflow vulnerability exists in Poppler 0.62 and earlier versions, which stems from incorrect memory access not mapped in memory space. An attacker could exploit this vulnerability to corru...
JVN#71329812: WL-330NUL vulnerable to cross-site request forgery
WL-330NUL provided by ASUS Japan Inc. is a portable wireless LAN router. WL-330NUL contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in the management screen, unintended operations may be performed on the device. Solution Update the...
[SECURITY] Fedora 28 Update: libgit2-0.26.5-1.fc28
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
[SECURITY] Fedora 28 Update: libtomcrypt-1.18.2-1.fc28
A comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines. Designed from the ground...
[SECURITY] Fedora 27 Update: libgit2-0.26.5-1.fc27
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
CVE-2018-7546
wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file...
DEBIAN-CVE-2018-14338
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms other than Apple platforms where glibc is not used, possibly leading to a buffer overflow...
DEBIAN-CVE-2018-0361
ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file...
ALPINE-CVE-2018-0361
ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file...
[SECURITY] Fedora 28 Update: singularity-2.5.2-1.fc28
Singularity provides functionality to make portable containers that can be used across host environments...
[SECURITY] Fedora 27 Update: singularity-2.5.2-1.fc27
Singularity provides functionality to make portable containers that can be used across host environments...
VulnCheck KEV: CVE-2012-5958
Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted...
[SECURITY] Fedora 28 Update: botan2-2.7.0-1.fc28
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
PT-2018-3946 · Libpng +2 · Libpng +2
Name of the Vulnerable Software and Affected Versions: Libpng versions prior to 1.6.36 Description: The issue is related to a stack-based buffer overflow in the get token function in pnm2png.c of the libpng library, which can be exploited by a remote attacker to access sensitive data, compromise...
[SECURITY] Fedora 28 Update: libgit2-0.26.4-1.fc28
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
Microsoft Windows: Configuration of wireless settings using Windows Connect Now
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winconnectnow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configuration of wireless settings using Windows Connect Now Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Bring Your Own Land (BYOL) – A Novel Red Teaming Technique
Introduction One of most significant recent developments in sophisticated offensive operations is the use of “Living off the Land” LotL techniques by attackers. These techniques leverage legitimate tools present on the system, such as the PowerShell scripting language, in order to execute attacks...
Security Bulletin: A vulnerability in Apache Portable Runtime affects PowerKVM
Summary PowerKVM is affected by a vulnerability in Apache Portable Runtime apr. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-12613 DESCRIPTION: Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds...