The vulnerability of the ReadCINImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadCINImage function in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory consumption by using a specially crafted file...

ALPINE-CVE-2017-3636

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server execut...

CVE-2017-10168

Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite 8/Windows. The supported version that is affected is 1.1. Difficult to exploit vulnerability allows physical access to compromise Hospitality Hotel Mobile. Successful attacks of this...

Oracle Hospitality WebSuite8 Cloud Service Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction,...

CVE-2017-11382

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350...

UBUNTU-CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22385)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsJMPR' function of the base/ttinterp.c file in Artifex Ghostscript...

The vulnerability of the virtio_gpu_object_create function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the virtiogpuobjectcreate function in the Linux operating system is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure memory consumption by triggering an initialization error...

The vulnerability of the component implementation in ext/standard/var.c of the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability in the implementation of components in ext/standard/var.c of the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a service failure the use of a resource after it is freed or have...

The vulnerability of the `snd_msnd Interrupt` function in the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the Safari browser, which allows a hacker to trigger a service failure or cause other effects.

The vulnerability of JavaScript’s kernel in the WebKit browser engine used by Safari is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory spill, application termination, or other effects, by using...

The vulnerability of the Android operating system’s Mediaserver service allows a hacker to cause the device to freeze, restart, or experience a service failure.

The vulnerability of the Android operating system’s Mediaserver service is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive or restart through a specially created file or a service...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of the TextInput component in the iOS operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure memory corruption, application termination with...

SAP NetWeaver Denial of Service Vulnerability (CNVD-2017-14356)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to cause a deni...

The vulnerability of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office packages allows a perpetrator to cause service interruptions.

The vulnerabilities of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office arise from operations that occur outside of the buffer in memory. Exploitation of these vulnerabilities can allow a malicious...

The vulnerability in the JavaScript script of Internet Explorer and Microsoft Edge browsers allows attackers to induce a service failure.

The vulnerability of the JavaScript script in Internet Explorer and Microsoft Edge browsers arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Oracle Retail Invoice Matching Information Disclosure Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Invoice Matching is a component with retail invoice amount matching functionality, and Security is a security subcomponent. An information disclosure vulnerability exists i...

The vulnerability of the xdr_bytes and xdr_string functions in the library that handles system calls and core glibc functions allows a attacker to cause a service failure.

The vulnerabilities of the xdrbytes and xdrstring functions in the library that handles system calls and core glibc functions are related to the reclamation of unreliable data stored in memory after deserialization of buffers. Exploiting these vulnerabilities allows a remote attacker to cause a...

The vulnerability of the Remote Administration Daemon component of the Solaris operating system allows a perpetrator to gain access to read or modify data, thereby causing a partial service disruption.

The vulnerability of the Remote Administration Daemon component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, and cause partial service interruption...