5701 matches found
The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the resolveImplicitLevels function common/ubidi.c in the implementation of the Unicode Bidirectional Algorithm of the International Components for Unicode library is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to caus...
InstantHMI 6.1 - Privilege Escalation
Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...
The vulnerability of the MongoDB database management system allows a remote attacker to cause a service failure.
The vulnerability of the MongoDB database management system allows a malicious actor to trigger a service failure remotely by using a BSON query that contains a specially crafted string in UTF-8 format...
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the pushascii function of Samba’s smbd allows remote users who have completed authentication to trigger a service failure—a memory-related error and an unexpected termination of the daemon—by attempting to read the path name in Unicode format without using Unicode. This leads...
The vulnerability of the Flash Player software allows a malicious attacker to execute arbitrary code or cause a service failure.
The Flash Player software contains a vulnerability in the “PCRE” component, which stems from insufficient data validation when processing the “\c” control sequence followed by a character in UTF-8 encoding. This vulnerability can be exploited by malicious actors using a specially crafted swf file...
The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure by using a specially crafted certificate that does not utilize UTF-8 character encoding in the appropriate context...
The vulnerability of Google Chrome’s browser allows a malicious actor to replace URLs.
Google Chrome browser contains a vulnerability related to the incorrect processing of bidirectional IRI identifiers in the UnescapeURLWithOffsetsImpl function in net/base/escape.cc. Exploiting this vulnerability allows malicious actors to replace URLs with specially crafted Unicode text that is...
The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.
Internet Explorer browser contains a vulnerability related to buffer overflows, caused by insufficient validation of user-input data when processing combinations of CSS properties and Unicode characters. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitra...
libEBML Information Disclosure Vulnerability
libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A security vulnerability exists in libEBML. The vulnerability can be exploited to cause a denial of service off-by-few reads or information disclosure by means of specially crafted unicode...
IBM WebSphere eXtreme Scale HTTP Response Splitting Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The solution provides high-performance, scalable caching framework and grid technology to handle massive transactions, reduce database performance limitations and so on. An HTTP response splitting vulnerability exists in...
Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update
An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives ...
UBUNTU-CVE-2016-4541
The graphemestrpos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...
KMPlayer 3.9.1.136 UNICODE 溢出
No description provided by source...
RHEL 6 : java-1.7.0-openjdk (RHSA-2016:0675)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0675 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Security...
RedHat Update for java-1.7.0-openjdk RHSA-2016:0676-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)
It was discovered that the JAXP component in OpenJDK failed to properly handle Unicode surrogate pairs used as part of the XML attribute values. Specially crafted XML input could cause a Java application to use an excessive amount of memory when parsed...
Internet Download Manager 6.25 Build 14 - 'Find file' Unicode SEH Exploit
No description provided by source...
CVE-2015-8620
Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...
Heap overflow
Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...
CVE-2015-8620
Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...