CVE-2017-2591

It was found that the uniquenessentrytoconfig function, used by the "attribute uniqueness" plugin of 389 Directory Server, did not properly NULL terminate an array used in some configuration. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

SUSE-SU-2017:0189-1 Security update for gstreamer-plugins-base

CVE-2016-9811: out of bound memory read could lead to crash bsc1013669...

ImageMagick Viff File Out of Bound Read Vulnerability - Mac OS X

ImageMagick is prone to an out of bound read vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick Mat File Multiple Denial of Service Vulnerabilities - Windows

ImageMagick is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick Mat File Multiple Denial of Service Vulnerabilities - Mac OS X

ImageMagick is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick Viff File Out of Bound Read Vulnerability - Windows

ImageMagick is prone to an out of bound read vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Information Disclosure

mcrypt is vulnerable to information exposure. The vulnerability exists because TLS, SSH, and IPSec protocols have missing validate birthday bound which allows to remote attack access confidential information in system...

Exploit for Out-of-bounds Write in Quickheal Antivirus_Pro

QuickHeal ========= CVE-2017-5005 for Quick Heal Antivirus Adv...

Debian DSA-3746-1 : graphicsmagick - security update (ImageTragick)

Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service attacks, remote file deletion, and remote command execution. This security update removes the full support of PLT/Gnuplot decoder to prevent Gnuplot-shell based...

CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco...

Debian: Security Advisory (DSA-3746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 756-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u10 CVE ID : CVE-2016-7799 CVE-2016-8707 CVE-2016-8862 CVE-2016-8866 CVE-2016-9556 Debian Bug : 840437 845206 848139 845634 845242 845243 845195 845196 845198 845202 845212 845213 845241 845244 845246 Numerous vulnerabilities were discovered in...

Debian DLA-756-1 : imagemagick security update

Numerous vulnerabilities were discovered in ImageMagick, an image manipulation program. Issues include memory exception, heap, buffer and stack overflows, out of bound reads and missing checks. For Debian 7 'Wheezy', these problems have been fixed in version 8:6.7.7.10-5+deb7u10. The exact impact...

Fedora 23 : perl-DBD-MySQL (2016-bf6c3ea62c)

This release fixes CVE-2016-1249 out-of-bound read when using server-side prepared statements and CVE-2016-1251 vulnerability a use after free when using prepared statements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Microsoft SharePoint Server Excel Services Information Disclosure Vulnerability (3204068)

This host is missing a critical security update according to Microsoft Bulletin MS16-148. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory. Exploitation of the...

PT-2016-7287

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 for Mac Description The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document. Multiple information disclosure...

Microsoft Office Information Disclosure (MS16-148: CVE-2016-7268)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an out of bound memory read. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted file, which can lead to disclosure of sensitive information...

PT-2016-7280

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2010 SP2 Microsoft Word versions 2007 SP3 through 2010 SP2 Microsoft Office Compatibility Pack version SP3 Microsoft Word Viewer affected versions not specified Microsoft Word for Mac version 2011...

PT-2016-7291

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2010 SP2 Microsoft Office Compatibility Pack version SP3 Microsoft Office Web Apps version 2010 SP2 Microsoft SharePoint Server version 2010 SP2 Microsoft Word version 2007 SP3 through 2010 SP2...