PT-2017-13683

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue allows a local authenticated attacker to access user password hashes in a debugger-pause state during the authentication process, potentially leading to...

PT-2017-13684

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue is related to insufficient input validation of user-supplied file paths when uploading files via the application. This can be exploited by a local authenticated...

PT-2017-13685

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application affected versions not specified Description The issue allows for information disclosure through a username enumeration attack. A local unauthenticated attacker could exploit this to obtain valid usernames by...

PT-2017-13686

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue is related to an elevation of privileges during the authentication of a valid user in a debugger-pause state. This can only be exploited by a local authenticated...

PT-2020-7840

Name of the Vulnerable Software and Affected Versions: bitcoind and Bitcoin-Qt versions prior to 0.10.2 Description: The issue allows attackers to cause a denial of service, resulting in disabled functionality such as a client application crash, via an "Easy" attack. Recommendations: For versions...

CVE-2017-2800

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply ...

CVE-2017-2800

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply ...

Denial Of Service (DoS) Through Memory Overwrite

OepnSSL is vulnerable to denial of service DoS attacks through memory overwrite and client application crash. If a multithreaded client connects to a malicious server using a resumed session, it is possible to trigger a race condition in the sslparseserverhellotlsext function which allows an...

BullGuard antiviral applications authentication bypass

Access limitation are checked in client application...

Panda authentication bypass

Password is checked by client application...

CVE-2014-3510

The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service NULL pointer dereference and client application crash via a crafted handshake message in conjunction with a 1...

CVE-2014-5139

The sslsetclientdisabled function in t1lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service NULL pointer dereference and client application crash via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite...

CVE-2014-3509

Race condition in the sslparseserverhellotlsext function in t1lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service memory overwrite and client application crash or possibly have...

CVE-2014-5139

The sslsetclientdisabled function in t1lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service NULL pointer dereference and client application crash via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite...

PT-2014-1701

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1 through 1.0.1i OpenSSL versions prior to 1.0.1j Description The issue allows remote SSL servers to cause a denial of service, resulting in a NULL pointer dereference and client application crash. This can be achieved...

BankTown ActiveX Control 1.4.2 .51817/1.5.2 .50209 Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17815/info BankTown ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer...

Isemarket JaguarControl ActiveX Control Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14558/info Isemarket JaguarControl ActiveX control is prone to a buffer overflow. This could result in a failure of the client application invoking the control or potentially execution of arbitrary code. object...

Buffer overflow

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program...

PT-2014-4591

Name of the Vulnerable Software and Affected Versions SAS versions 9.2 TS2M3, 9.3 TS1M1, 9.3 TS1M2, and 9.4 TS1M0 Description A buffer overflow issue exists in the client application, allowing remote attackers to execute arbitrary code via a crafted SAS program. Recommendations For SAS version 9....

Design/Logic Flaw

The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access...