Lucene search
+L

5983 matches found

RedHat Linux
RedHat Linux
•added 2016/08/02 4:39 p.m.•17 views

libtiff: invalid assertion

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...

6.5CVSS7.4AI score0.0266EPSS
SaveExploits0References4
CNVD
CNVD
•added 2016/07/26 12:00 a.m.•16 views

OpenOffice Impress MetaActions Arbitrary Read/Write Vulnerability

OpenOffice.org is a cross-platform office software suite that runs on Windows, Linux, MacOS X X11 and Solaris. Openoffice has an out-of-bounds vulnerability in the handling of MetaActions. An attacker can trigger the vulnerability by causing out-of-bounds reads and writes with an Open Office...

7.8CVSS6.9AI score0.04336EPSS
SaveExploits1References1
zdt
zdt
•added 2016/07/25 12:00 a.m.•129 views

PHP 7.0.8 / 5.6.23 / 5.5.37 - bzread() Out-of-Bounds Write

Exploit for php platform in category dos / poc ''' PHP 7.0.8, 5.6.23 and 5.5.37 does not perform adequate error handling in its bzread' function: php-7.0.8/ext/bz2/bz2.c ,---- | 364 static PHPFUNCTIONbzread | 365 | ... | 382 ZSTRLENdata = phpstreamreadstream, ZSTRVALdata, ZSTRLENdata; | 383...

6.8CVSS7.7AI score0.09844EPSS
SaveExploits5
CNVD
CNVD
•added 2016/07/13 12:00 a.m.•22 views

Microsoft Windows Printing Backend Handler Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Print Spooler service is one of the print service components. An elevation of privilege vulnerability exists in the Microsoft Windows Print Spooler Server, which arises from the program failing to properly allow arbitrary...

7.8CVSS8AI score0.01432EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•11 views

The vulnerability of Cisco Nexus 1000V software allows a malicious individual to gain access to confidential information.

The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...

10CVSS8.2AI score0.9994EPSS
SaveExploits31References2
OSV
OSV
•added 2016/06/24 12:00 a.m.•14 views

UBUNTU-CVE-2016-5688

The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...

8.1CVSS7.6AI score0.04824EPSS
SaveExploits0References4
CNVD
CNVD
•added 2016/06/22 12:00 a.m.•16 views

ImageMagick WPG Parser Heap Overflow Vulnerability

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A security vulnerability exists in ImageMagick's WPG parser, which can be exploited by attackers to cause a heap overflow and random invalid memory writes...

8.1CVSS9.1AI score0.04824EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/05/10 12:00 a.m.•40 views

GNU gcc Memory Misreference Vulnerability

GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A memory misreference vulnerability exists in GNU gcc. An attacker can exploit the vulnerability to cause invalid writes with the help of the 'ktypevec' parameter...

5.5CVSS9.1AI score0.0168EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/05/10 12:00 a.m.•14 views

GNU gcc memory misreference vulnerability (CNVD-2016-03093)

GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A memory misreference vulnerability exists in GNU gcc. An attacker can exploit the vulnerability to cause invalid writes with the help of the 'btypevec' parameter...

5.5CVSS9.1AI score0.01672EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/15 2:59 p.m.•12 views

CVE-2016-0889

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname...

9.8CVSS5.9AI score0.03139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/02/16 12:00 a.m.•2 views

PT-2018-7199

Name of the Vulnerable Software and Affected Versions: Zabbix Server versions 2.4.x Description: The issue allows specifically crafted trapper packets to bypass database logic checks, resulting in unauthorized database writes. This can be exploited by setting up a Man-in-the-Middle server to alte...

7CVSS0.0415EPSS
SaveExploits2References23
Tenable Nessus
Tenable Nessus
•added 2016/02/12 12:00 a.m.•34 views

openSUSE Security Update : tiff (openSUSE-2016-184)

This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images boo964225 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

6.5CVSS8.1AI score0.02832EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/02/10 12:00 a.m.•34 views

SUSE SLED11 / SLES11 Security Update : tiff (SUSE-SU-2016:0353-1)

This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images bsc964225 - CVE-2015-7554: Out-of-bounds Write in the thumbnail and tiffcmp tools bsc960341 Note that Tenable Network Security has extracted the preceding...

9.8CVSS7.1AI score0.04187EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
•added 2016/02/03 12:00 a.m.•81 views

RHEL 7 : kernel (RHSA-2016:0103)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0103 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the x86 ISA Instruction Set...

10CVSS6.6AI score0.03442EPSS
SaveExploits17References8
OSV
OSV
•added 2016/02/01 9:59 p.m.•16 views

CVE-2015-8782

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...

6.5CVSS6.3AI score
SaveExploits0References15
Cvelist
Cvelist
•added 2016/02/01 9:00 p.m.•34 views

CVE-2015-8782

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...

6.3AI score0.0266EPSS
SaveExploits0References14
Mend
Mend
•added 2016/02/01 9:00 p.m.•1 views

CVE-2015-8782

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...

7.1CVSS0.0266EPSS
SaveExploits0References16
CVE
CVE
•added 2016/02/01 9:00 p.m.•134 views

CVE-2015-8782

CVE-2015-8782 is a LibTIFF vulnerability in tif_luv.c that allows an attacker to trigger out-of-bounds writes via a crafted TIFF image, potentially enabling arbitrary code execution with the privileges of the image-processing component. Public advisories note this is one of multiple LibTIFF flaws...

6.5CVSS6.1AI score0.0266EPSS
SaveExploits0References14Affected Software1
Debian CVE
Debian CVE
•added 2016/02/01 9:00 p.m.•37 views

CVE-2015-8782

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...

6.5CVSS7.3AI score0.0266EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2016/02/01 12:00 a.m.•56 views

Debian DLA-405-1 : tiff security update

Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads and writes in the LogL16Decode, LogLuvDecode24, LogLuvDecode32, LogLuvDecodeTile, LogL16Encode, LogLuvEncode24,...

6.5CVSS7.2AI score0.04609EPSS
SaveExploits0References7
Rows per page
Query Builder