51 matches found
CVE-2023-36566: Improper Input Validation
Microsoft Common Data Model SDK Denial of Service Vulnerability...
Microsoft Common Data Model SDK Security Vulnerability
Microsoft Common Data Model SDK is a software application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Common Data Model SDK. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected: Microsoft Comm...
CVE-2017-9622
Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...
CVE-2017-9622: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...
Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information
A vulnerability exists in the cdfcountchain function in the cdf.c file of the Fileinfo component in PHP, due to improper data validation for the sector counters. Exploitation of this vulnerability allows malicious actors to induce a service failure abnormal termination of the application by using...
CVE-2014-3480
The cdfcountchain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service application crash via a crafted CDF file...
UBUNTU-CVE-2014-0207
The cdfreadshortsector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted CDF file...
MDVA-2009:187 : desktop-common-data
Sound events for IaOra sound theme were not disabled by default for some actions. This package fixes this issue and ensure OpenOffice entries are in the correct order in Office menu in desktop environments. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...
CVE-2009-2850
Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...
CVE-2009-2850
Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...
CVE-2009-2850
CVE-2009-2850 relates to multiple heap/buffer overflows in NASA’s Common Data Format (CDF) library. The vulnerabilities are triggered by issues in functions such as ReadAEDRList64, SearchForRecord_r_64, LastRecord64, and CDFsel64, allowing context-dependent attackers to potentially execute arbitr...
CDF: User-assisted execution of arbitrary code
Background CDF is a library for the Common Data Format which is a self-describing data format for the storage and manipulation of scalar and multidimensional data. It is developed by the NASA. Description Leon Juranic reported multiple heap-based buffer overflows for instance in the ReadAEDRList6...
CVE-2009-2850: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...
[INFIGO-2009-07-09]: NASA Common Data Format remote buffer overflow(s)
=================================================================== 'Celebrating 40 years of Apollo and 20 years of buffer overflows' =================================================================== INFIGO IS Security Advisory ADV-2009-07-09 http://www.infigo.hr/en/ Title: NASA Common Data...
MDVA-2008:026 : desktop-common-data
In Mandriva Linux 2008.0 some utilities were not correctly displayed in Tools menu such as Yakuake, and settings:// was not working properly in KDE konqueror. This update fixes the problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently ...
Mandriva Update for desktop-common-data MDKA-2007:006 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDKA-2007:006 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for desktop-common-data MDVA-2008:026 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2008:026 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for desktop-common-data MDVA-2008:026 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2008:026 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for desktop-common-data MDKA-2007:006 (desktop-common-data)
Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDKA-2007:006 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...