Lucene search
+L

6675 matches found

NVD
NVD
•added 2016/04/11 9:59 p.m.•23 views

CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

7.5CVSS5.6AI score0.02554EPSS
SaveExploits0References8
Prion
Prion
•added 2016/04/11 9:59 p.m.•23 views

Stack overflow

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

7.5CVSS7.3AI score0.02554EPSS
SaveExploits0References8Affected Software3
Prion
Prion
•added 2016/04/11 9:59 p.m.•23 views

Stack overflow

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

7.5CVSS7.6AI score0.02554EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2016/04/11 9:59 p.m.•34 views

CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

7.5CVSS7.4AI score0.02554EPSS
SaveExploits0References6
OSV
OSV
•added 2016/04/11 9:59 p.m.•12 views

UBUNTU-CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

7.3CVSS7.4AI score0.01539EPSS
SaveExploits0References2
CVE
CVE
•added 2016/04/11 9:00 p.m.•100 views

CVE-2015-8614

Claws Mail (GTK-based email client) is affected by a stack-based buffer overflow in codeconv.c (conv_jistoeuc, conv_euctojis, conv_sjistoeuc) that can be triggered by a crafted email containing Japanese character set conversions. Affects versions before 3.13.1; CVE-2015-8708 notes this is an inco...

7.5CVSS5.5AI score0.02554EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2016/04/11 9:00 p.m.•2 views

CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

7.5CVSS0.01539EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2016/04/11 9:00 p.m.•87 views

CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

7.5CVSS7.4AI score0.02554EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/11 12:00 a.m.•4 views

CVE-2015-8614: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

7.5CVSS7.5AI score0.02554EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/11 12:00 a.m.•5 views

CVE-2015-8708: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

7.5CVSS7.5AI score0.01539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/04/05 12:00 a.m.•2 views

PT-2016-5353

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 3.7.3 Description The issue allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository. Recommendations For versions prior to 3.7.3, update to version 3.7.3 or later to...

8.8CVSS0.04953EPSS
SaveExploits0References45
hackapp
hackapp
•added 2016/04/01 9:10 a.m.•9 views

Video to MP3 - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Video to MP3 published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:02 a.m.•15 views

تحويل العملات والصرف - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application تحويل العملات والصرف published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2016/03/29 12:00 a.m.•17 views

Adobe Flash - Object.unwatch Use-After-Free

Adobe Flash - Object.unwatch Use-After-Free Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=716 https://googleprojectzero.blogspot.ca/2016/03/life-after-isolated-heap.html The bug is an uninitialized variable in the fix to an ActionScript 2 use-after-free bug. Roughly 80 of the...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/03/23 12:00 a.m.•42 views

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=715 The ActionScript parameter conversion in the fix for issue 403 https://code.google.com/p/google-security-research/issues/detail?id=403 can sometimes access a parameter on the native stack that is uninitialized. If: mc.swapDepth...

9.3CVSS7.7AI score0.28525EPSS
SaveExploits3
zdt
zdt
•added 2016/03/23 12:00 a.m.•71 views

Adobe Flash - Uninitialized Stack Parameter Access in AsBroadcaster.broadcastMessage UaF Fix

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=717 The ActionScript parameter conversion in the fix for an issue in the December Flash bulletin https://helpx.adobe.com/security/products/flash-player/apsb15-32.html, most likely...

10CVSS7.7AI score0.28565EPSS
SaveExploits3
myhack58
myhack58
•added 2016/03/21 12:00 a.m.•60 views

BoxSoft WAV to MP3 Converter software vulnerability analysis CVE-2 0 1 5-7 2 4 3-the vulnerability warning-the black bar safety net

1, software description BoxSoft WAV to MP3 Converter is a 1 0 0% free powerful audio conversion tool that can Batch the WAV format files into high-quality MP3 audio files, it is equipped with a standard audio encoder, you can set the bit rate and a conversion of the plurality of audio files,...

SaveExploits0
zdt
zdt
•added 2016/03/16 12:00 a.m.•89 views

FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow

Exploit for freebsd platform in category dos / poc / 1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-amd64setldt-heap-overflow Date published: 2016-03-16 Date of last update:...

4.9CVSS6.8AI score0.01263EPSS
SaveExploits6
exploitpack
exploitpack
•added 2016/02/26 12:00 a.m.•16 views

Qualcomm Adreno GPU MSM Driver - perfcounter Query Heap Overflow

Qualcomm Adreno GPU MSM Driver - perfcounter Query Heap Overflow / Source: https://code.google.com/p/google-security-research/issues/detail?id=734 The Adreno GPU driver for the MSM Linux kernel contains a heap overflow in the IOCTLKGSLPERFCOUNTERQUERY ioctl command. The bug results from an...

0.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/02/19 12:00 a.m.•4 views

PT-2016-5667

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description The issue is a stack-based buffer overflow in the getaddrinfo function, which can be exploited by remote attackers to cause a denial of service, resulting in a crash. This is achieved through...

9.8CVSS0.05926EPSS
SaveExploits2References117
Rows per page
Query Builder