186 matches found
SUSE CVE-2016-6912
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via large width and height values...
SUSE CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
SUSE CVE-2017-12133
Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...
SUSE CVE-2018-6621
The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
HPESBUX04323 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities
Potential Security Impact: Local: Compromise of System Integrity, Escalation of Privilege, Unauthorized Access, Unauthorized Disclosure of Information, Authentication Restriction Bypass; Remote: Compromise of System Integrity, Escalation of Privilege, Unauthorized Disclosure of Information,...
GHSA-4VHF-2HV7-8MRX Improper Restriction of XML External Entity Reference in Apache ActiveMQ
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
The vulnerability of the imagetruecolortopalette function in the PHP programming language allows a perpetrator to trigger a service failure or potentially cause other effects.
The vulnerability of the imagetruecolortopalette function ext/gd/gd.c in the PHP programming language is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability may allow a remote attacker to cause a service failure or potentially have other adverse effects...
Code injection
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...
PT-2021-3242 · Lasso +9 · Lasso +9
Name of the Vulnerable Software and Affected Versions: Lasso versions prior to 2.7.0 Description: The issue is related to improper management of privileges in the Lasso library, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected...
Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-1336)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco RoomOS Software and TelePresence Collaboration Endpoint Software Operating System Command Injection Vulnerability
Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of the U.S. company Cisco Cisco.Cisco RoomOS Software is a set of automatic management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisc...
PT-2019-4485 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.0.21 Description: The issue is related to a use-after-free in the ext4 put super function in fs/ext4/super.c, which is connected to the dump orphan list function in the same file. This can occur when mounting a crafted...
CVE-2016-7550
asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...
Mailtraq WebMail 2.17.7.3550 Cross Site Scripting
Exploit Title: Persistent Cross Site Scripting XSS - Mailtraq WebMail version 2.17.7.3550 CVE: CVE-2019-9558 Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.mailtraq.com/mail-server-software Category: webapps Attack Type: Remote Impact:...
CVE-2018-11416
jpegoptim.c in jpegoptim 1.4.5 fixed in 1.4.6 has an invalid use of realloc and free, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
UBUNTU-CVE-2018-10753
Stack-based buffer overflow in the delayedoutput function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
PT-2020-5463
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10.3 FasterXML jackson-databind versions 2.6.0 through 2.6.7.3 Description The issue is related to the interaction between serialization gadgets and typing, specifically with...
DEBIAN-CVE-2017-12133
Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...
CVE-2017-12955
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...