299 matches found
The vulnerability of the ReadWEBPImage function (coders/webp.c) in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the ReadWEBPImage function coders/webp.c in the console-based image editing tool ImageMagick arises from an operation that occurs outside the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
JasPer Denial of Service Vulnerability (CNVD-2017-25686)
JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdequantize function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...
The vulnerability of the Oniguruma library, related to writing beyond the buffer boundaries on the stack, allows a hacker to cause a service failure.
The vulnerability of the Oniguruma library exists due to the improper handling of the code position 0xFFFFFFFF in the unicodeunfoldkey function during the compilation of regular expressions. As a result, when the nigencunicodegetcasefoldcodesbystr function is called, 4 bytes will be written at th...
The vulnerability of the parser_yyerror function in the UTF-8 format interpreter for Ruby allows a violator to trigger a service failure or cause other effects.
The vulnerability of the parseryyerror function in the UTF-8 format interpreter for Ruby is related to reading or writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or other effects to bypass the $SAFE...
The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.
The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by...
The vulnerability of the CURLFile service implementation in the ext/curl/curl_file.c file of the PHP interpreter allows a attacker to cause a service failure or exert other effects.
The vulnerability of the CURLFile service implementation in the ext/curl/curlfile.c file of the PHP interpreter relates to the use of memory after it is freed. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures or other effects through special...
GNU Libtasn1 '_asn1_check_identifier' Denial of Service Vulnerability
Libtasn1 is the ASN.1 library used by GnuTLS. A denial of service vulnerability exists in GNU Libtasn1 'asn1checkidentifier'. The vulnerability stems from the asn1checkidentifier function reading specially designed input, which can be exploited by an attacker to cause a remote denial of service...
The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.
The vulnerability of JPEG 2000 stream parser programs for viewing and editing PDF files from Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the control device in the electrical energy sector of SICAM PAS allows a intruder to cause a service failure or execute an arbitrary code.
The vulnerability of the telecontrol device in the electrical energy sector, SICAM PAS, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions or execute arbitrary commands by sending specially...
CVE-2016-5488
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445...
OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...
JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...
OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...
Unspecified Vulnerability in Oracle Database Server Portable Clusterware
Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Portable Clusterware component of Oracle Database Server versions 11.2.0.4, 12.1.0.2, which can ...
The vulnerability of the Cisco Wireless LAN Controller 2100 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The state of the race function in sslparseserverhellotlsext in t1lib.c of OpenSSL, when multiprocessing and session resumption are used, allows remote SSL servers to cause service interruptions such as memory reallocation and unexpected termination of applications, or otherwise affect the system ...
The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to cause service interruptions or execute arbitrary codes.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow attackers to execute arbitra...
CVE-2016-0420
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics...
OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA...