1179 matches found
USN-4826-1 soundtouch vulnerabilities
It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM. CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 It was discovered that SoundTouch incorrectly handled...
Denial of Service Vulnerability in Pothole App
Tencent Wave Cave app is a comic book reading platform that gathers a large number of users who love the second generation. A denial-of-service vulnerability exists in Wave Cave App, which can be exploited by attackers to cause denial-of-service attacks...
Imperva recognized as a ‘Leader’ in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report
We are delighted to share that Imperva has been named a leader in The Forrester Wave: DDoS Mitigation Solutions, Q1 2021 report, a trusted source for technology buyers which helps security and risk professionals select the right vendor for their needs. You can download a copy of the report here...
Akamai Identified as a Leader in DDoS Mitigation by Forrester
This week, Akamai was again recognized as a Leader in the latest The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021. Akamai has also been recognized by Forrester as a Leader in its most recent The Forrester Wave™: Zero Trust eXtended Ecosystem Platform Providers, Q3 2020, The Forrester New...
Akamai Identified as a Leader in DDoS Mitigation by Forrester
This week, Akamai was again recognized as a Leader in the latest The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021...
Wave Inspur ClusterEngine Parameter Injection Vulnerability
Wave Inspur ClusterEngine is an application software from China's Wave Corporation. It provides management of jobs submitted by hardware and software in a cluster system. A security vulnerability exists in Inspur ClusterEngine V4.0, which can be exploited by remote attackers to send malicious log...
Microsoft Dynamics Cross-Site Scripting Vulnerability
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics. The following...
Command Execution Vulnerability in Wave ClusterEngine V4.0
Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine V4.0, which can be exploited by an attacker to gain server privileges...
Design/Logic Flaw
An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...
Command Execution Vulnerability in Wave ClusterEngine
Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...
Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...
Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy
I’m thrilled to announce Forrester Research has named Microsoft Azure Sentinel as a “Leader” in The Forrester Wave: Security Analytics Platform Providers, Q4 2020. When we released Azure Sentinel almost a year ago—the industry’s first cloud-native SIEM on a major public cloud—our goal was to...
Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy
I’m thrilled to announce Forrester Research has named Microsoft Azure Sentinel as a “Leader” in The Forrester Wave: Security Analytics Platform Providers, Q4 2020. When we released Azure Sentinel almost a year ago—the industry’s first cloud-native SIEM on a major public cloud—our goal was to...
SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c outside the wNumCoef loop...
SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c...
SDL: buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...
SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...
CVE-2019-18795
The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...
SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c inside the wNumCoef loop...