5262 matches found
Failed to convert vdisk with error message "BNIStack failed, network stack could not be initialized"
Target device unable to startup with error "BNIStack failed, network stack could not be initialized"...
vBulletin /forumrunner/request.php SQL injection vulnerability
Author: janesknow Chong Yu 404 security lab Date: 2016-11-15 Vulnerability overview Vulnerability description vBulletin is a commercial Forum application, using PHP language, researchers have found that the VBulletin core plug-in forumrunner presence of SQL injection vulnerabilities: CVE-2016-619...
Harvest: Extracting private info of estimates.
Hey there, So when someone creates a new estimate for a client it is not accessible to anyone except the admin and the person with the private URL of the web invoice. Now their is an option to convert estimate into invoice through https://amandhakertest.harvestapp.com/invoices/new?estimateid=IDHE...
Foxit Reader < 7.2 Multiple RCE
Binary data 9458.prm...
IBM PowerVC Information Disclosure Vulnerability (CNVD-2016-05956)
IBM PowerVC is a suite of virtualization management solutions. IBM PowerVC is affected by the OpenStack Nova information disclosure vulnerability. A local attacker can exploit the vulnerability to read arbitrary files from the host via qcow2 support for file overwrite image conversion...
Out-of-bounds read during XML parsing in Expat library — Mozilla
Security researcher Gustavo Grieco reported a potential out-of-bounds read parsing malformed XML data during character conversion. This is due to a bug in the Expat library, which is used in Firefox. This could allow an attacker to read other inaccessible memory...
[SECURITY] Fedora 24 Update: kf5-kemoticons-5.24.0-1.fc24
KDE Frameworks 5 Tier 3 module that provides emoticons themes as well as helper classes to automatically convert text emoticons to graphical emotico ns...
Fedora 24 : php-pecl-zip (2016-79ac80a0d5)
Version 1.13.3 - Fixed bug php71923 integer overflow in ZipArchive::getFrom. CVE-2016-3078 Stas - Fixed bug php72258 ZipArchive converts filenames to unrecoverable form. Anatol - Fixed bug php72434 ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize. Dmitry Note th...
PT-2020-8033 · Openjpeg +1 · Openjpeg +1
Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.1.1 Description: The issue allows attackers to cause a denial of service, specifically memory corruption, by using a crafted jpeg 2000 file. This is due to a problem in the color esycc to rgb function...
The vulnerability of the Redis database management system allows a hacker to execute arbitrary Lua bytecode.
The vulnerability of the deps/lua/src/ldo.c component of the Redis database management system is related to incorrect data type conversion. Exploiting this vulnerability allows a malicious actor to execute any Lua bytecode using a specially crafted eval command...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-825)
GraphicsMagick was updated to fix 37 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9813: Crash on corrupted viff file bsc984035. - CVE-2014-9814: NULL pointer dereference in...
Command Line Certificate Examination Utility: certigo
Command Line Certificate Examination Utility Certigo is a utility to examine and validate certificates in a variety of formats. Install To install certigo, simply use: go get -u github.com/square/certigo Note that certigo requires Go 1.6 or later to build. Usage Certigo can read...
CVE-2016-2380
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of-bounds read. A user could be convinced to enter a particular string which would then get converted incorrectly and could lead to a...
GNU C Library getaddrinfo function stack buffer overflow vulnerability
glibc is the libc library, or c runtime library, released by GNU. A stack buffer overflow vulnerability exists in the GNU C Library glibc or libc6 sysdeps/posix/getaddrinfo.c/getaddrinfo function. A remote attacker can cause a denial of service via hostent conversion...
CVE-2016-3706
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2016-3706
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...
DEBIAN-CVE-2016-3706
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2016-3706
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2016-3706
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...
LXD Path Read Vulnerability
LXD is a container for managing applications on Linux-based systems. LXD fails to properly set permissions when converting the container to privileged mode, allowing a local attacker to exploit the vulnerability to access arbitrary globally readable paths in the container directory...