136 matches found
UBUNTU-CVE-2020-10672
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...
AZL-45171 CVE-2019-1010004 affecting package sox 14.4.2.0-34
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
AZL-43855 CVE-2019-1010004 affecting package sox 14.4.2.0-34
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
DEBIAN-CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
Design/Logic Flaw
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
UBUNTU-CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: readsamples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189...
PT-2019-11431
Name of the Vulnerable Software and Affected Versions: SoX - Sound eXchange versions 14.4.2 and earlier Description: The issue is related to an out-of-bounds read, which can cause a denial of service. It is located in the read samples function at xa.c:219. The attack vector involves a victim...
IBM Integration Bus 8.x <= 8.0.0.9 / 9.x < 9.0.0.11 / 10.x < 10.0.0.12 JDBC XA switch load files Vulnerability (CVE-2017-1418)
The version of IBM Integration Bus formerly known as IBM WebSphere Message Broker installed on the remote host is 8.x prior or equal to 8.0.0.9, 9.x prior to 9.0.0.11, or 10.x prior to 10.0.0.12. It is, therefore, affected by an unspecified file permissions vulnerability. C Tenable Network...
PT-2018-13655
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for cross-site scripting XSS attacks via an SVG file containing JavaScript in a SCRIPT element, specifically affecting the "panel/uploads/elf l1 XA" endpoint. Recommendations For Subrion C...
Samsung, Huawei and other phone Bootloader was traced to the presence of many high-risk bug-vulnerability warning-the black bar safety net
California University research team to create the main stream mobile platform in the bootloader exists in the code test and the DOS of the security gap. Workshop staff with a BootStomp to create 6 new found cracks, 5 of which division is the manufacturer to confirm. There is also a su XI reported...
BootStomp: Find Mobile Device Bootloader Vulnerabilities
PenTestIT RSS Feed Oh boy! This post is going to be interesting as it is about an interesting topic - mobile bootloaders. Specifically, this post is about BootStomp, which helps you find vulnerabilities in the bootloader. All of us know; as the name suggests, that bootloader is a program loads th...
The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.
The vulnerability of the MySQL database management system allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data accessibility by using the XA subcomponent...
Oracle MySQL Multiple Unspecified vulnerabilities-05 (Apr 2015) - Windows
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2015-0405
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA...
CVE-2015-0405
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA...