17684 matches found
CVE-2017-5885
Multiple integer overflows in the 1 vncconnectionservermessage and 2 vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service crash or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow...
VIPA Automation WinPLC7 recv Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VIPA Automation WinPLC7. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of TCP packets. The software fails to validate the length field...
EMC Documentum Content Server DQL Injection Vulnerability
EMC Documentum Content Server is a content management service system from EMC. A DQL injection vulnerability exists in EMC Documentum Content Server because the program fails to properly filter user-submitted input. A remote attacker can exploit the vulnerability by sending a specially crafted...
QNAP QTS Command Injection Vulnerability
QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A command injection vulnerability exists in QNAP QTS version 4.2.x, which can be exploited to conduct a man-in-the-middle attack durin...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability in the Flash Player software platform of the Flash Broker COM is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
GLSA-201702-14 : PyCrypto: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201702-14 PyCrypto: Remote execution of arbitrary code A heap-based buffer overflow vulnerability has been discovered in PyCrypto. Please review the CVE identifier referenced below for details. Impact : A remote attacker, able to...
DEBIAN-CVE-2017-2362
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
CVE-2016-7594
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
UBUNTU-CVE-2016-7640
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
Out-of-bounds
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash via a crafted PDF file...
CVE-2016-7641
CVE-2016-7641 concerns WebKit in Apple ecosystems (iOS, Safari, iCloud, iTunes, etc.). The issue allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, via memory corruption in WebKit. Several connected advisories (SUSE/openSUSE patches) list thi...
PyCrypto: Remote execution of arbitrary code
Background The Python Cryptography Toolkit PyCrypto is a collection of both secure hash functions such as SHA256 and RIPEMD160, and various encryption algorithms AES, DES, RSA, ElGamal, etc.. Description A heap-based buffer overflow vulnerability has been discovered in PyCrypto. Please review the...
ALPINE-CVE-2016-10134
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php...
ImageMagick: Multiple vulnerabilities
Background ImageMagick is a collection of tools and libraries for many image formats. Description Multiple vulnerabilities have been discovered in ImageMagick. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing a user to process a specially craft...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the HTC TouchScreen operating system’s driver is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
UBUNTU-CVE-2017-2356
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...
CVE-2016-6077
IBM Cognos Disclosure Management 10.2 (affected: 10.2.0–10.2.6) contains CVE-2016-6077, where a crafted Macro in an exported CSV could cause Excel Macro execution on the client and potentially execute commands as a lower privileged user. Remediation: apply Cognos Disclosure Management 10.2.5 Inte...
GOsa Arbitrary Command Execution Vulnerability
GOsa is a set of LDAP front-end tools for managing users. A security vulnerability exists in the 'generatesmbnthash' function in the include/functions.inc file in GOsa. A remote attacker can exploit this vulnerability to execute arbitrary commands with the help of a specially crafted password...
