5585 matches found
PT-2015-6789
Name of the Vulnerable Software and Affected Versions ZendXml versions prior to 1.0.1 Zend Framework versions prior to 1.12.14 Zend Framework 2.x versions prior to 2.4.6 Zend Framework 2.5.x versions prior to 2.5.2 Description The issue allows remote attackers to bypass security checks and conduc...
DEBIAN-CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...
CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...
CVE-2013-7443: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...
GE Healthcare Centricity PACS-IW Built-in Account Vulnerability
GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. Built-in accounts exist for GE Healthcare Centricity PACS-IW, with 'shared' passwords for shared users; and 'scan' passwords for scan users, allowing remote attackers to to utilize these accoun...
PT-2015-3518
Name of the Vulnerable Software and Affected Versions TeraRecon server versions 3.7.3.7 through 3.7.3.8 Description The issue concerns the TeraRecon server, which has a shared password for the shared user and a password 'scan' for the scan user. The impact and attack vectors of this issue are not...
USN-2698-1 sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled skip-scan optimization. An attacker could use this issue to cause applications using SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. CVE-2013-7443 Michal Zalewski...
GET to the vulnerability-vulnerability warning-the black bar safety net
This article is mainly about the current on the Internet get method is non-standard use of some of the security vulnerabilities. Which focuses on speaking the get request in the account login system is abuse of the scene and attacks. 0x01 Get method defined In between the client and server for...
PT-2015-3591
Name of the Vulnerable Software and Affected Versions SQLite version 3.8.2 Description A buffer overflow issue exists in the skip-scan optimization, allowing remote attackers to cause a denial of service by crashing the system via crafted SQL statements. Recommendations For SQLite version 3.8.2,...
UBUNTU-CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...
Threat Outbreak Alert RuleID16470: Email Messages Distributing Malicious Software on July 6, 2015
Medium Alert ID: 39764 First Published: 2015 July 8 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16470 may contain the following files: Name | Size...
PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
According to its banner, the version of PHP 5.6.x running on the remote web server is prior to 5.6.10. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist in the bundled Perl-Compatible Regular Expression PCRE library due to improper validatio...
Content Spoofing in UpdateMyJiraHome
A third party scan found that the ConvertIssue.jspa action is vulnerable to content spoofing, in specific text injection. In this case the content spoofing may be used to perform a phishing attack on users. How to reproduce: 1- go to...
Content Spoofing in UpdateMyJiraHome
A third party scan found that the ConvertIssue.jspa action is vulnerable to content spoofing, in specific text injection. In this case the content spoofing may be used to perform a phishing attack on users. How to reproduce: 1- go to...
Content Spoofing in UpdateMyJiraHome
A third party scan found that the ConvertIssue.jspa action is vulnerable to content spoofing, in specific text injection. In this case the content spoofing may be used to perform a phishing attack on users. How to reproduce: 1- go to...
Content Spoofing in AppPortalPage
A third party scan found that the ConvertIssue.jspa action is vulnerable to content spoofing, in specific text injection. In this case the content spoofing may be used to perform a phishing attack on users. How to reproduce:...
FreeBSD : testdisk -- buffer overflow with malicious disk image (c67069dc-0986-11e5-bb90-002590263bf5)
CGSecurity TestDisk Changelog reports : Various fix including security fix, thanks to : - Coverity scan Static Analysis of source code - afl-fuzz security-oriented fuzzer. - Denis Andzakovic from Security Assessment for reporting an exploitable Stack Buffer Overflow. Denis Andzakovic reports : A...
Code injection
Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...
CVE-2015-0769: Undefined Security Weakness
Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...
