UBUNTU-CVE-2016-8691

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

CVE-2016-3995: Exposure of Sensitive Information to an Unauthorized Actor

The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ aka cryptopp before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks...

DiskBoss Enterprise - GET Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DiskBoss Enterprise GET Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability i...

UBUNTU-CVE-2016-8882

The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

netwijs.nl XSS vulnerability

Vulnerable URL: http://www.netwijs.nl/asp/invado.asp?t=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=13 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1837353 VIP website status:| N...

chita.ru5.info XSS vulnerability

Vulnerable URL: http://chita.ru5.info/search.php?txt=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

PT-2017-7828

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.12 Description The issue is related to an integer overflow in the jpc dec tiledecode function, which can be triggered by a crafted image file. This overflow can lead to a heap-based buffer overflow, potentially...

PT-2017-9740

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted YRsiz value in a BMP image to the imginfo command. This occur...

PT-2017-9853

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a crafted file. This is due to a NULL pointer dereference in the jpc dec tilefini function. Recommendations...

PT-2017-9854

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc dec tiledecode function in jpc dec.c. Recommendations For versions prior to...

PT-2016-3520

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to the vid dec set h264 mv buffers function in the Qualcomm components, which does not validate the number of buffers. This allows attackers to gain privileges via a crafted...

PT-2016-3519

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue is related to the vid dec set meta buffers function in the Qualcomm components, which does not validate the number of buffers. This allows attackers to ga...

PT-2017-8437

Name of the Vulnerable Software and Affected Versions Crypto++ versions prior to 5.6.4 Description The issue concerns the timing attack protection in the Rijndael encryption and decryption processes. Specifically, the Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock functio...

PT-2016-1770

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is related to a buffer overflow in the decoder/impeg2d dec hdr.c function of the mediaserver component. This can be exploited by remote attackers using a specially crafted media file,...

UBUNTU-CVE-2016-1964

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging mishandling of XML transformations...

Integer overflow

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

CVE-2016-1624

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

CVE-2016-1624: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

UBUNTU-CVE-2016-1624

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

PT-2016-1260

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.109 Opera affected versions not specified Brotli affected versions not specified Description The issue is caused by an integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotl...