2998 matches found
Buffalo WZR-1750DHP2 Buffer Overflow Vulnerability
The Buffalo WZR-1750DHP2 is a router product from the Buffalo Group of Japan. A buffer overflow vulnerability exists in the Buffalo WZR-1750DHP2 version 2.30 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted files...
Buffalo WZR-1750DHP2 Arbitrary Command Execution Vulnerability
The Buffalo WZR-1750DHP2 is a router product from the Buffalo Group of Japan. A security vulnerability exists in the Buffalo WZR-1750DHP2 version 2.30 and earlier. An attacker can exploit the vulnerability to execute arbitrary operating system commands...
CVE-2018-2406
Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...
kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation
A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...
kernel: unlimiting the stack disables ASLR
A weakness was found in the Linux ASLR implementation. Any user able to running 32-bit applications in a x86 machine can disable ASLR by setting the RLIMITSTACK resource to unlimited...
DEBIAN-CVE-2018-1301
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode both log and build level...
CVE-2018-7513
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...
CVE-2017-8013
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...
Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05320)
CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to dereference untrusted pointers via an...
Unspecified Vulnerability in Omron CX-Supervisor
CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability in Omron CX-Supervisor version 3.30 can be exploited by an attacker to execute arbitrary code when CX Supervisor indirectly...
UBUNTU-CVE-2018-7641
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...
ALPINE-CVE-2018-7568
The parsedie function in dwarf1.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer overflow and application crash via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm...
UBUNTU-CVE-2018-7208
In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafte...
CVE-2017-8993
A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management PPM version v9.30, v9.31, v9.32, v9.40 was found...
Exploit for Use After Free in Adobe Flash_Player
CVE-2018-4878 POC CVE-2018-4878 was first demonstrated being...
GNU Binutils 'elf_parse_notes' Function Denial of Service Vulnerability
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...
SUSE-SU-2018:0384-1 Security update for mariadb
This update for mariadb to version 10.0.33 fixes several issues. These security issues were fixed: - CVE-2017-10378: Vulnerability in subcomponent: Server: Optimizer. Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL...
GNU Binutils load_specific_debug_section() function denial of service vulnerability
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in the...
January 31, 2018âKB4058258 (OS Build 16299.214)
None None...
USN-3541-2 linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities
USN-3541-1 addressed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. Jann Horn discovered that microprocessors utilizing speculative execution and branch...