954 matches found
PT-2017-19077
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript GhostXPS version 9.21 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts via a crafted document. This...
PT-2017-19079
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript GhostXPS version 9.21 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, or possibly have other unspecified impacts via a crafted...
CVE-2017-9619: Improper Restriction of Operations within the Bounds of a Memory Buffer
The xpstruecallbackglyphname function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service Segmentation Violation and application crash via a crafted file...
Authentication flaw
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...
CVE-2017-7919
The CVE-2017-7919 issue affects Newport XPS-Cx and XPS-Qx, where an attacker may bypass authentication by accessing a specific URL. This is classified as Improper Authentication with high impact (CVSS v3 base score 9.8) and is remotely exploitable with no user interaction. Affected products inclu...
CVE-2017-7919: Improper Authentication
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...
PT-2017-17995
Name of the Vulnerable Software and Affected Versions Newport XPS-Cx and XPS-Qx affected versions not specified Description An issue with improper authentication was found, allowing an attacker to bypass authentication by accessing a specific URL. Recommendations At the moment, there is no...
(Pwn2Own) Microsoft Windows XPS Document Writer Uninitialized Memory Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Newport XPS-Cx, XPS-Qx
CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Newport Equipment: XPS-Cx, XPS-Qx Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of XPS-Cx and XPS-Qx, a universal motion controller, are affected: XPS-Cx all versions, and XPS-Qx all...
MS16-148: Description of the security update for Excel 2013: December 13, 2016
MS16-148: Description of the security update for Excel 2013: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
DEBIAN-CVE-2016-7161
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet...
UBUNTU-CVE-2016-7161
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet...
openSUSE Security Update : the Linux Kernel (openSUSE-2015-879)
The Linux Kernel was updated to 4.1.13 and fixes the following issues : Security issues fixed : - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service host OS panic or hang by triggering many DB aka Debug exceptions, related to svm.c. -...
Microsoft Revoves Trust for eDellroot Certficates
In the wake of last week’s eDellroot fiasco, Microsoft announced Monday that it revoked support for the self-signed, trusted root certificates that were found on some Dell computers. In a security advisory published on Monday, the company acknowledged that in order to prevent fraud, it removed...
Dell aeration eDellRoot root certificate Backdoor-vulnerability warning-the black bar safety net
Earlier this year, Lenovo computer was found loaded with the Superfish adware program, this software will increase the user vulnerable to hackers attack risk, the moment sparked a lot of discussion, and recently, the Duo lab security researcher in Dell Inspiron 1 4 Notebook found some strange...
NVidia Display Driver Service (Nsvr) Exploit
No description provided by source. / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - than...
Microsoft SQL Server 7.0/2000,Data Engine 1.0/2000 xp_showcolv Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2038/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow vulnerability which may cause the application to fail or...
Corel PDF Fusion Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' cla...
MuPDF 1.3 - Stack-based Buffer Overflow in xps_parse_color()
No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...
