DEBIAN-CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series...

Exempi Denial of Service Vulnerability (CNVD-2018-06684)

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in the Chunk class of the XMPFiles/source/FormatSupport/RIFF.cpp file in versions of Exempi prior to 2.4.4. A remote attacker can exploit this vulnerability to cause a denial of service...

Joyent Node.js moment module denial of service vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform . moment is one of the JavaScript date processing library . A security vulnerability exists in the Joyent Node.js moment module. The vulnerability can be...

UBUNTU-CVE-2018-0489

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

Buffer overflow

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

Buffer overflow

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

CVE-2014-7221

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

CVE-2014-7222

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

CVE-2014-7221

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

CVE-2014-7222

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Updated rsync package fixes security vulnerability

The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-16895

The 1 arqupdater, 2 arqcommitter, 3 standardrestorer, 4 arqglacierrestorer, and 5 arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet...

Heap overflow

The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...

CVE-2017-16548

The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...

USN-3458-1: ICU vulnerability

It was discovered that ICU incorrectly handled certain inputs. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...

Pidgin MXIT Markup Command Denial of Service Vulnerability(CVE-2016-2365)

DESCRIPTION A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data t...

Pidgin MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability(CVE-2016-2369)

DESCRIPTION An NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a denial of service vulnerability. A malicious server can send a packet starting with a NULL byte triggering the...