4114 matches found
CVE-2017-14283: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000008fe4."...
CVE-2017-14281: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1."...
PT-2017-13354
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file. It is related to "Data from Faulting Address controls Branch Selecti...
CVE-2017-14273: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlInterlockedPopEntrySList+0x00000000000003b0."...
CVE-2017-14275: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...
PT-2017-13338
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. It is related to a "User Mode Write AV starting at ntdll...
PT-2017-13342
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. It is related to "Data from Faulting Address controls subsequent Write Address...
CVE-2017-14285: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlInterlockedPopEntrySList+0x000000000000039b."...
PT-2017-13344
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at...
PT-2017-13343
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. This is related to a "User Mode Write AV near NULL starting at...
CVE-2017-14272: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."...
CVE-2017-14284: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."...
PT-2017-13346
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .jb2 file. This is related to a "Read Access Violation" error. Recommendations...
PT-2017-13341
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. This is related to a "User Mode Write AV starting at ntdll...
CVE-2017-14280: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d."...
CVE-2017-14279: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...
Aerohive Networks HiveManager Remote Shell Upload Exploit
Exploit for hardware platform in category web applications I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and...
Aerohive Networks HiveManager Remote Shell Upload
I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and centralized monitoring of thousands of Aerohive access points,...
CVE-2017-14105
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...
