CVE-2019-14907

A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability. Mitigation Do not set ...

Crash after failed character conversion at

Description If samba is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process such ...

IonMonkey JIT Compiler Resource Access

The vulnerability of the IonMonkey JavaScript compiler for Firefox and Firefox ESR browsers is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

CVE-2018-16869

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process could use this flaw extract plain text or, in some cases,...

[SECURITY] Fedora 31 Update: htmldoc-1.9.7-1.fc31

HTMLDOC converts HTML source files into indexed HTML, PostScript, or Portable Document Format PDF files that can be viewed online or printed. With no options a HTML document is produced on stdout. The second form of HTMLDOC reads HTML source from stdin, which allows you to use HTMLDOC as a filter...

WordPress WooCommerce Conversion Tracking plugin <=2.0.4 - Cross-Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF to XSS vulnerability found in WordPress WooCommerce Conversion Tracking plugin versions =2.0.4. Solution Update the WordPress WooCommerce Conversion Tracking plugin to the latest available version at least 2.0.6...

[SECURITY] Fedora 30 Update: htmldoc-1.9.7-1.fc30

HTMLDOC converts HTML source files into indexed HTML, PostScript, or Portable Document Format PDF files that can be viewed online or printed. With no options a HTML document is produced on stdout. The second form of HTMLDOC reads HTML source from stdin, which allows you to use HTMLDOC as a filter...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. PoC...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. ' /...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

Code injection

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655

CVE-2019-4655 affects IBM MQ (9.1.x: 9.1.0.0–9.1.3) and IBM MQ Appliance; vulnerability arises from an error in the Data Conversion routine that could allow an authenticated user to reset client connections, causing a denial of service. Impact is a DoS on channel handling by triggering failure da...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655: Undefined Security Weakness

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

PT-2019-17147

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.3 Description The issue allows an authenticated user to reset client connections due to an error within the Data Conversion routine, resulting in a denial of service attack. Recommendations For IBM MQ versio...

PT-2019-6181 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the genpstrx text component in genpstricks.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. Recommendations: F...

PT-2019-6180 · Fig2Dev · Fig2Dev

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A global buffer overflow in the genmp writefontmacro latex component in genmp.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into mp format. The vulnerability is...

CVE-2019-6147: Incorrect Type Conversion or Cast

Forcepoint NGFW Security Management Center SMC versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next...

Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by an error within the Data Conversion routine (CVE-2019-4655)

Summary An error was found within the IBM MQ message data conversion processing code that could cause multiple failure data capture FDC records to be generated and prevent the channel handling process amqrmppa from handling requests. Vulnerability Details CVEID: CVE-2019-4655 DESCRIPTION: IBM MQ ...