Moxa SoftCMS Buffer Overflow Vulnerability

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Buffer overflow vulnerabilities exist in Moxa SoftCMS version 1.3 and earlier. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Wireshark 'epan/packet.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the dissector-table implementation in the epan/packet.c file in Wireshark versions 1.12.7 prior to 1.12.x. The vulnerability can be exploited to...

UBUNTU-CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...

IBM MQ Light Denial of Service Vulnerability (CNVD-2015-05120)

IBM MQ Light is a messaging service from IBM USA based on IBM Bluemix, a PaaS platform for creating, deploying and managing applications on the cloud. A security vulnerability exists in IBM MQ Light versions 1.0 and 1.0.0.1 due to the program failing to properly handle authentication credentials....

Research Artisan Lite Cross-Site Scripting Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A cross-site scripting vulnerability exists in Research Artisan Lite versions prior to 1.18. The vulnerability can be exploited by remote attackers to inject...

Cisco Identity Services Engine Security Bypass Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security bypass...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the krb5-debuginfo-1.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the minicom-1.83.1 operating system from Red Hat Linux can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

EMC PowerPath Virtual Appliance Information Disclosure Vulnerability

EMC PowerPath Virtual Appliance aka vApp is a host-based path optimization software from EMC. The software provides automated data path management, failover and recovery, and load balancing optimization in both physical and virtual environments. A security vulnerability exists in EMC PowerPath...

PT-2015-4258 · D Link · D-Link Dcs-2103

Name of the Vulnerable Software and Affected Versions: D-link IP camera DCS-2103 versions prior to 1.20 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING to "vb.htm". Recommendations: For versions prior to 1.20, updat...

SUSE-SU-2015:0653-1 Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues. These security issues have been fixed: SigComp UDVM buffer overflow CVE-2014-8710. AMQP dissector crash CVE-2014-8711. NCP dissector crashes CVE-2014-8712, CVE-2014-8713. TN5250 infinite loops CVE-2014-8714. This...

DEBIAN-CVE-2014-0222

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...

CVE-2013-4537

The ssisdtransfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image...

Qemu: qcow1: validate L2 table size to avoid integer overflows

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...

foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation

app/controllers/api/v1/hostscontroller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request...

Qemu: qcow1: validate image size to avoid out-of-bounds memory access

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...

Qemu: qcow1: validate L2 table size to avoid integer overflows

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...

1: Class Loader manipulation via request parameters

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrar...

DEBIAN-CVE-2014-1959

lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates...

gnutls: incorrect handling of V1 intermediate certificates

GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different...