Pidgin MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability(CVE-2016-2369)

DESCRIPTION An NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a denial of service vulnerability. A malicious server can send a packet starting with a NULL byte triggering the...

Pidgin MXIT Markup Command Denial of Service Vulnerability(CVE-2016-2365)

DESCRIPTION A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data t...

UBUNTU-CVE-2017-15570

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/list.html.erb via crafted column data...

Code injection

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/list.html.erb via crafted column data...

Pivotal Spring Data REST Remote Code Execution Vulnerability

Spring Data REST is part of the Spring Data project and enables building hypermedia-driven REST web services on top of the Spring Data repository. A remote code execution vulnerability exists in Pivotal Spring Data REST, which allows an attacker to perform a remote code execution attack by...

Microsoft Office Excel xlsb File Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft .NET Framework Remote Code Execution (CVE-2017-8759)

A remote code execution vulnerability exists in the Microsoft .NET Framework. The vulnerability is due to the way .NET framework parses Web Services. A remote attacker could exploit this vulnerability by sending specially crafted data to the target that uses .NET framework...

The vulnerability of the i_zval_ptr_dtor function in the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability of the izvalptrdtor function in the PHP interpreter is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures or other effects such as memory consumption or termination of the application by using...

IBM Sterling B2B Integrator XML External Entity Injection Vulnerability

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of IBM Corporation, U.S.A. IBM Sterling B2B Integrator is a suite of software that integrates B2B processes, transactions, and relationships across different partner communities.IBM Sterling IBM Sterling File Gateway is a...

tcpdump: multiple overflow issues in protocol decoding

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2017-7010

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "libxml2" component. It allows remote...

The vulnerability of the __wakeup modification in PHP interpreters allows a attacker to trigger a service failure or exert other effects.

The vulnerability of the wakeup modification in PHP interpreters relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service failures or other effects through specially crafted data, as demonstrated in the exception...

The vulnerability of the Zend/zend_hash.c component in the PHP interpreter allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Zend/zendhash.c component in the PHP interpreter arises due to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure due to integer overflow, uninitialized memory access, or the use of destructor functions...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of the TextInput component in the iOS operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure memory corruption, application termination with...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11059)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

The vulnerability of the Foundation component in operating systems such as Mac OS X and iOS allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the Foundation component in Mac OS X and iOS operating systems arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application...

CVE-2017-9623

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

UBUNTU-CVE-2017-5878

The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data...

Multiple Apple Products Foundation Component Memory Corruption Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system. foundation is a framework that provides basic system services for all applications. A memory corruption vulnerability exists in the Foundation component of...

CVE-2017-2524

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary code or cause a denia...