Cross-site scripting vulnerability in wordpress plugin entity-decode-button

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin entity-decode-button. The program fails to filter user-supplied input, allowing an attacker to...

PT-2016-7630 · Tarantool · Tarantool

Name of the Vulnerable Software and Affected Versions: Tarantool version 1.7.2.0-g8e92715 Description: The issue is related to an out-of-bounds array access in the xrow header decode function. A specially crafted packet can cause the function to access an element outside the bounds of a global...

PT-2016-7351

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue is related to the cavs idct8 add c function in libavcodec/cavsdsp.c, which is vulnerable to reading out-of-bounds memory when decoding with cavs decode. Recommendations For versions prior to...

An SQL injection vulnerability exists in the DBSHOP_0.9.3_Beta getQuery() function.

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta suffers from SQL injection vulnerability. Due to the /DBSHOP/module/Shopfront/src/Shopfront/Controller/GoodslistController.php at indexAction first through getQuery to get all the parameters,...

PT-2017-1551

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.5-8 Description The issue is related to a buffer overflow in the sixel decode function, which can be exploited by remote attackers using a crafted file. This can cause a denial of service, resulting in an...

DEBIAN-CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

DEBIAN-CVE-2016-7163

Integer overflow in the opjpicreatedecode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write...

Internet Bug Bounty: integer overflow in base64_decode caused heap corruption

Please check: https://bugs.php.net/bug.php?id=72836...

libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c

REJECTED CVE This CVE has been rejected. This candidate is a duplicate of CVE-2016-5314. Note: All CVE users should reference CVE-2016-5314 instead of this candidate...

The vulnerability of the Firefox browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to the incorrect processing of string data consisting solely of spaces in the base64DecodeInternal function in wtf/text/Base64.cpp in Blink. Exploiting this vulnerability allows malicious actors to trigger a denial-of-service attack by...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servic...

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

libxml2: Inappropriate fetch of entities content

XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

Silicon Graphics LibTiff 'PixarLogDecode' Function Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. A security vulnerability in the 'PixarLogDecode' function in Silicon Graphics LibTiff's tifpixarlog.c file allows remote attackers to exploit the vulnerability to construct special TIFF images that can be tricked into being...

Silicon Graphics LibTiff 'DumpModeDecode' Function Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. A security vulnerability in the 'DumpModeDecode' function of Silicon Graphics LibTiff allows remote attackers to exploit the vulnerability to construct special TIFF images that can be tricked into being parsed by the user,...

UBUNTU-CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...