1221 matches found
EUVD-2017-14611
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...
Moodle Information Disclosure Vulnerability (CNVD-2017-04096)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an information disclosure vulnerability. An attacker could exploit...
Unisys ClearPath MCP Denial of Service Vulnerability
ClearPath MCP is a complete software operating environment. A denial of service vulnerability exists in Unisys ClearPath MCP. An attacker could exploit this vulnerability to cause a denial of service...
Weblate Information Disclosure Vulnerability
Weblate is a free web-based translation management system. It can be tightly integrated with version control. It features a clean and simple user interface, translation synchronization between components, quality checking and automatic linking to source files. Weblate suffers from an information...
IBM Connections Information Disclosure Vulnerability (CNVD-2016-11314)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...
Google Android Kernel Component Information Disclosure Vulnerability
Google Chrome is a web browser developed by Google, and Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android Kernel component. An attacker can exploit the...
IBM TRIRIGA Application Platform Privilege Vulnerability
IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A privilege extraction vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to gain privileges...
Allen-Bradley MicroLogix 1400 Multiple Vulnerabilities
Binary data scadaABmicrologix1400.nbin...
Adobe Acrobat And Reader Memory Corruption (APSB16-09: CVE-2016-1009)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially...
NTP Security Bypass Vulnerability (CNVD-2016-00818)
NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Juniper Networks ScreenOS Denial of Service Vulnerability
Juniper Networks ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A denial of service vulnerability exists in Juniper Networks ScreenOS. An attacker could exploit this vulnerability to cause an application to crash, denying service to legitimate user...
IBM WebSphere Portal Denial of Service Vulnerability
IBM WebSphere Portal consists of middleware, applications called portlets and development tools for building and managing secure business-to-business B2B, business-to-customer B2C and business-to-employee B2E portals. A denial of service vulnerability exists in IBM WebSphere Portal. An attacker i...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2562-1)
Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...
Microsoft Office Invalid Pointer Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6335)
A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...
CVE-2014-3613
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1...
Zoom Media Gallery 2.1.2 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
HTML::BBCode 1.03/1.04 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16680/info HTML::BBCode is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...
PHPKIT 1.6.x 'b-day.php' Addon SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38891/info PHPKIT 'b-day.php' addon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...