2605 matches found
Cisco IOS and IOS XE ISDN Interface Denial of Service Vulnerability
Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the ISDN functionality in Cisco IOS and IOS XE, which stems from the program's failure to properly handle values in the Q.931 message element. A remote...
OPENSUSE-SU-2019:1-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc11197...
CVE-2019-7419
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...
Denial of Service in PAN-OS Management Interface
A Denial of Service vulnerability exists in the SNMP library that affects PAN-OS Management Interface. Ref PAN-106922, CVE-2018-18065. Successful exploitation of this issue would allow a remote unauthenticated user to cause the SNMP daemon to crash, resulting in a denial of service. The...
SUSE-SU-2019:0636-1 Security update for nodejs10
This update for nodejs10 to version 10.1.2 fixes the following issue: Security issue fixed: - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532...
org.aksw.sparqlify:sparqlify-cli (=0.8.3), org.aksw.sparqlify:sparqlify-core (=0.8.3) +2 more potentially affected by CVE-2017-12625 via org.apache.hive:hive-service (=2.3.0)
org.apache.hive:hive-service MAVEN version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-service and may be impacted: - org.aksw.sparqlify:sparqlify-cli =0.8.3 - org.aksw.sparqlify:sparqlify-core =0.8.3 -...
MGASA-2019-0092 Updated poppler packages fix security vulnerability
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo. CVE-2018-18897 XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of...
openSUSE Security Update : python (openSUSE-2019-184)
This update for python fixes the following issues : Security issue fixed : - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
SUSE-SU-2019:0271-1 Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191...
SUSE-SU-2019:0215-1 Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 - CVE-2018-20406: Fixed a integer overflow via a large LONGBINPUT bsc1120644...
MGASA-2019-0047 Updated libxml2 packages fix security vulnerabilities
A flaw was found in libxml2 2.9.8. The xzdecomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint CVE-2018-9251, CVE-2018-14567. A null pointer...
A vulnerability in the DHCP service of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability in the DHCP service of the Windows operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted DHCP response...
The vulnerability of the software update service for Cisco WebEx Meetings Desktop App and WebEx Productivity Tools for Windows operating systems allows a malicious individual to execute arbitrary commands.
The vulnerability of the software update service for Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows operating systems is related to the improper handling of special elements used in the operating system’s command line. Exploiting this vulnerability can allow an attacker...
Debian: Security Advisory (DLA-1623-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-6347
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00...
PT-2018-3697 · Poppler +4 · Poppler +4
Name of the Vulnerable Software and Affected Versions: Poppler version 0.72.0 Description: The issue is related to the PDFDoc::setup function in the PDFDoc.cc component of the Poppler library, which is used for displaying PDF files. It allows attackers to cause a denial-of-service, resulting in a...
CVE-2017-9732
The CVE-2017-9732 issue affects knc (Kerberised NetCat) before 1.11-1, with a vulnerability in read_packet that can cause memory exhaustion (DoS). An unauthenticated remote attacker can trigger this by sending a crafted Kerberos handshake blob, and the vulnerable read_packet path uses a temporary...
SUSE-SU-2018:4150-1 Security update for openldap2
This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2017-17740: When both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service slapd crash via a...
Denial of service
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework...
