230 matches found
Advantech WebAccess < 8.0.2015.08.16 Unspecified DLL String Handling Arbitrary Code Execution
Binary data scadaadvantechwebaccess820150816.nbin...
CUPS < 2.0.3 - Multiple Vulnerabilities
Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subset of software bugs become unexploitable, and others become...
[SECURITY] Fedora 22 Update: qt5-qtbase-5.4.1-9.fc22
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2014-5355
MIT Kerberos 5 aka krb5 through 1.13.1 incorrectly expects that a krb5readmessage data field is represented as a string ending with a '\0' character, which allows remote attackers to 1 cause a denial of service NULL pointer dereference via a zero-byte version string or 2 cause a denial of service...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. MIT Kerberos 5 aka krb5 through 1.13.1 incorrectly expects that a krb5readmessage data field is represented as a string ending with a '\0' character, which allows remote attackers to 1 cause a denial of service NU...
SUSE-SU-2015:0353-1 Security update for samba
samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...
UBUNTU-CVE-2014-9157
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...
mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR...
[SECURITY] Fedora 19 Update: qt5-qtbase-5.2.1-8.fc19
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...
Microsoft Internet Explorer jsdbgui Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
[SECURITY] Fedora 17 Update: qt-4.8.4-11.fc17
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
[SECURITY] Fedora 18 Update: qt-4.8.4-11.fc18
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...
[SECURITY] Fedora 16 Update: qt-4.8.0-7.fc16
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2011-2861
Technical details for CVE-2011-2861 are not publicly provided in the connected documents. Monitor for updates from upstream sources.
Google Chrome < 13.0.782.107 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 13.0.782.107. As such, it is potentially affected by several vulnerabilities : - An unspecified error exists related to extension installation and confirmation dialogs. Issue 75821 - A stale pointer issue exists related to...
Squid: Denial of service due internal error in string handling (SQUID-2010:3)
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...
RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞
BUGTRAQ ID: 47110 CVE ID: CVE-2010-4235 RealNetwork Helix Server是一款支持多格式、跨平台的流媒体服务器软件，能将高质量的多媒体内容发不到任何网络位置。 Helix Server在处理请求中的"x-wap-profile"头选项时存在格式串处理漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Real Networks Helix Mobile Server 14.0.0 Real Networks Helix Mobile Server 13.x Real Networks Helix Mobile...
CVE-2008-7285
The vulnerability described for CVE-2008-7285 affects IBM Lotus Quickr 8.1 prior to 8.1.0.2 for Lotus Domino, due to an issue in the docnote string handling implementation. The advisory states remote attackers can cause a denial of service (daemon crash) via unknown vectors (SPR JFLD7GZT25). No c...