Lucene search
+L

1285 matches found

The Hacker News
The Hacker News
added 2017/03/13 6:7 a.m.15 views

Scientists Store One Bit of Data on a Single Atom — Future of Data Storage

Imagine a pocket-sized hard drive capable of storing the entire list of 35 Million Songs? This isn't yet practical, but IBM has just taken a big step towards improving computing technology: IBM researchers just discovered a way to store data on a single atom. Data storage is undergoing dramatic...

6.4AI score
SaveExploits0
Debian
Debian
added 2017/03/01 1:18 a.m.49 views

[SECURITY] [DLA 844-1] libquicktime security update

Package : libquicktime Version : 2:1.2.4-3+deb7u1 CVE ID : CVE-2016-2399 Debian Bug : 855099 Marco nemux Romano discovered that an integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other...

7.8CVSS8.3AI score0.07184EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2017/03/01 12:0 a.m.38 views

Debian DLA-844-1 : libquicktime security update

Marco 'nemux' Romano discovered that an integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom. For Debian 7 'Wheezy', these problems have bee...

7.8CVSS7.4AI score0.07184EPSS
SaveExploits5References3
Prion
Prion
added 2017/01/30 10:59 p.m.11 views

Integer overflow

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

6.8CVSS7.8AI score0.07184EPSS
SaveExploits5References5Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/30 10:59 p.m.15 views

CVE-2016-2399

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

7.8CVSS7.2AI score0.07184EPSS
SaveExploits5References3
OSV
OSV
added 2017/01/30 10:59 p.m.3 views

DEBIAN-CVE-2016-2399

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

7.8CVSS7.7AI score0.07184EPSS
SaveExploits5References1
NVD
NVD
added 2017/01/30 10:59 p.m.15 views

CVE-2016-2399

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

7.8CVSS7.9AI score0.07184EPSS
SaveExploits5References5
Cvelist
Cvelist
added 2017/01/30 10:0 p.m.22 views

CVE-2016-2399

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

7.8AI score0.07184EPSS
SaveExploits5References5
Debian CVE
Debian CVE
added 2017/01/30 10:0 p.m.46 views

CVE-2016-2399

Integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom...

7.8CVSS7.9AI score0.07184EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2017/01/11 8:38 a.m.5 views

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

9.3CVSS6.1AI score0.09905EPSS
SaveExploits0References5
OSV
OSV
added 2017/01/11 4:59 a.m.2 views

CVE-2017-2926

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6AI score0.09905EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2017/01/03 12:0 a.m.51 views

Mozilla Thunderbird < 45.6 Multiple Vulnerabilities (macOS)

The version of Mozilla Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists, such as when handling document state changes or HTML5 content, or else due to dereferencing...

9.8CVSS8.1AI score0.21401EPSS
SaveExploits11References9
Veracode
Veracode
added 2016/12/23 4:4 a.m.37 views

XML External Entity (XXE)

Apache CXF JAX-RS is vulnerable to XML eternal entity XXE attacks. The Atom MessageBodyReaders use Apache Abdera Parser to parse Atom feeds or Entries, with this Parser expanding XML entities by default. This represents a major XXE risk...

7.8CVSS7.5AI score0.07317EPSS
SaveExploits0References12Affected Software1
RedhatCVE
RedhatCVE
added 2016/12/21 2:47 p.m.43 views

CVE-2016-8739

Apache CXF JAX-RS implementation provides a number of Atom MessageBodyReaders. These readers use Apache Abdera Parser to parse Atom feeds or Entries, with this Parser expanding XML entities by default. It was found that this represents a major XXE risk...

7.8CVSS4.6AI score0.07317EPSS
SaveExploits0References2
OSV
OSV
added 2016/12/13 12:0 a.m.4 views

UBUNTU-CVE-2016-9904

An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox 50.1, Firefox...

7.5CVSS7.1AI score0.02753EPSS
SaveExploits0References5
Node.js
Node.js
added 2016/12/01 3:36 p.m.42 views

Downloads Resources over HTTP

Overview Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS5.7AI score0.01682EPSS
SaveExploits0Affected Software1
Vulnerability Lab
Vulnerability Lab
added 2016/11/02 12:0 a.m.38 views

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

1.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/10/27 11:31 a.m.15 views

Windows Atom Tables Can Be Abused for Code Injection Attacks

Researchers have identified a way attackers could use atom tables in all versions of Windows to inject malicious code into a computer and bypass detection by security products at the same time. The technique has been nicknamed AtomBombing by researchers at enSilo, and opens the door to perform...

0.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/09/20 12:0 a.m.33 views

openSUSE Security Update : virtualbox (openSUSE-2016-1087)

Virtualbox was updated to 5.0.26 to fix the following issues : This update fixes various security issues. - CVE-2016-3612: An unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allowed remote attackers to affect confidentiality via...

5.9CVSS6.4AI score0.0261EPSS
SaveExploits0References5
NVD
NVD
added 2016/04/25 6:59 p.m.19 views

CVE-2016-1202

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line...

7.8CVSS7.6AI score0.00431EPSS
SaveExploits0References4
Rows per page
Query Builder