9502 matches found
UBUNTU-CVE-2017-7585
In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file...
Huawei HiSuite Information Disclosure Vulnerability
Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An information disclosure vulnerability exists in Huawei HiSuite version 4.0.5.300OVE, due to the password box in the proxy settings screen not disabling the copy function. An attacker can exploit this vulnerabili...
The vulnerability of the mm/gup.c component in the Linux operating system allows a hacker to increase their privileges.
The vulnerability of the mm/gup.c component in the Linux operating system exists due to insufficient checking of resource status when it can be used concurrently. Exploiting this vulnerability allows an attacker, operating locally, to enhance their privileges by improperly using the Copy-Write CO...
Cisco IOS XE Smart Install Protocol Misuse (cisco-sr-20170214-smi)
The remote Cisco IOS XE device has the Smart Install Feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a...
shopify-scripts: SIGSEGV in array_copy - array.c:71
File 2 as input causes a segfault in mruby. mruby crashes in arycopy array.c:71: Program received signal SIGSEGV, Segmentation fault. 0x000000000040e088 in arraycopy src=, size=, dst= at /tmp/mruby/src/array.c:71 71 dsti = srci; Test platform: Linux 3.16.0-4-amd64 1 SMP Debian 3.16.39-1+deb8u1...
OracleVM 3.3 / 3.4 : openssh (OVMSA-2017-0053)
The remote OracleVM system is missing necessary patches to address critical security updates : - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 - Fix missing hmac-md5-96 from server offer 1373836 - Prevent...
DEBIAN-CVE-2017-7304
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check in the copyspecialsectionfields function for an invalid shlink field before attempting to follow it. This vulnerability causes Binutils...
Fox Digital Copy (Beta) - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Fox Digital Copy Beta published at the 'play' market has multiple vulnerabilities...
PCRE 'pcre32_copy_substring' function buffer overflow vulnerability (CNVD-2017-04912)
PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in the 'pcre32copysubstring' function in the pcreget.c file of libpcre1 in PCRE version 8.40. A...
LibTIFF tools/tiffcp.c file heap buffer overflow vulnerability
LibTIFF is a library for reading and writing the Tagged Image File Format abbreviated as TIFF. A heap buffer overflow vulnerability exists in the tools/tiffcp.c file in LibTIFF version 4.0.7. A remote attacker could use this vulnerability to cause a denial of service integer overflow with a...
Backup Copy Seeding and Mapping for Cloud Connect
Objective This article documents how to seed a Backup Copy job for use with a Cloud Repository from a Veeam Cloud Service Provider. Solution Critical Notes Starting with Veeam Backup & Replication v10, there are now two different backup copy modes: Immediate copy and Periodic copy. The mode used ...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
Design/Logic Flaw
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
DEBIAN-CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
CVE-2016-10145
CVE-2016-10145 is rejected/not used; not an active vulnerability entry.
DEBIAN-CVE-2017-7245
Stack-based buffer overflow in the pcre32copysubstring function in pcreget.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service WRITE of size 4 or possibly have unspecified other impact via a crafted file...
The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net
Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does not produ...