9357 matches found
EulerOS 2.0 SP3 : binutils (EulerOS-SA-2018-1154)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The displaydebugranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service integer overflow and...
CVE-2018-12916
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...
CVE-2018-12916
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...
Design/Logic Flaw
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...
Code injection
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...
CVE-2018-12918
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...
CVE-2018-12918
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...
CVE-2018-12918
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...
CVE-2018-12916
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...
CVE-2018-12916
The CVE-2018-12916 issue affects the Google Protocol Buffers-based C library PBC (libpbc.a). The vulnerability is a segmentation fault in _pbcP_message_default within proto.c present through versions up to 2017-03-02. Impact is a crash/denial of service, as described in multiple sources (e.g., CN...
CVE-2018-12918
CVE-2018-12918 affects the Google Protocol Buffers C library (PBC) bundled as libpbc.a. The vulnerability is a segmentation fault in the function _pbcB_register_fields within bootstrap.c, reported for PBC builds up to 2017-03-02. Connected documents confirm the fault location, but no concrete exp...
Denial Of Service (DoS)
openpsa/midcom is vulnerable to denial of service Dos attacks. The library uses a vulnerable version of PHP and calls the insecure method xmlparseintostruct. This can allow a malicious user to upload an XML file with the RSS Upload feature to cause a buffer under read or segmentation fault that c...
Mozilla Firefox Security Advisories (MFSA2018-15, MFSA2018-17) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox ESR Security Advisories (MFSA2018-15, MFSA2018-17) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
FreeBSD : mozilla -- multiple vulnerabilities (cd81806c-26e7-4d4a-8425-02724a2f48af)
Mozilla Foundation reports : CVE-2018-12359: Buffer overflow using computed size of canvas element CVE-2018-12360: Use-after-free when using focus CVE-2018-12361: Integer overflow in SwizzleData CVE-2018-12358: Same-origin bypass using service worker and redirection CVE-2018-12362: Integer overfl...
CVE-2018-1374
An IBM WebSphere MQ Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4 client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. IBM X-Force ID: 137775...
Security fix for the ALT Linux 10 package firefox-esr version 60.1.0-alt1
June 26, 2018 Andrey Cherepanov 60.1.0-alt1 - New ESR version 60.1.0. - Fixed: + CVE-2018-12359 Buffer overflow using computed size of canvas element + CVE-2018-12360 Use-after-free when using focus + CVE-2018-12361 Integer overflow in SwizzleData + CVE-2018-12362 Integer overflow in SSSE3 scaler...
CVE-2018-12688
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation tinyexr 0.9.5 has a segmentation fault in the wav2Decode function. Remediation There is no fixed version for tinyexr. References - GitHub Issue...