UBUNTU-CVE-2018-12687

tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h...

Magento Hackers Using Simple Evasion Trick to Reinfect Sites With Malware

Security researchers have been warning of a new trick that cybercriminals are leveraging to hide their malicious code designed to re-introduce the infection to steal confidential information from Magento based online e-commerce websites. So, if you have already cleaned up your hacked Magento...

FFmpeg 'ff_mpeg4_decode_picture_header' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg. The vulnerability can be exploited to cause a denial of servic...

Libmobi Denial of Service Vulnerability

Libmobi is used to process Mobipocket/Kindle MOBI e-book format document C library . A denial of service vulnerability exists in the mobidecodefontresource function in util.c in Libmobi version 0.3. A remote attacker can exploit this vulnerability via specially crafted mobi files to cause a denia...

PT-2018-10784

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause a denial of service or possibly have other impact via a crafted mobi file. This is due to a heap-based buffer overflow in the mobi decode font resource function in...

PT-2018-4004

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to an inconsistent bits-per-sample value in the ff mpeg4 decode picture header function, which may trigger an assertion violation when converting a crafted AVI file to MPEG4. This can lead to...

tinyexr buffer overflow vulnerability (CNVD-2018-14428)

tinyexr is a small OpenEXR image load/save library. A buffer overflow vulnerability exists in the 'tinyexr::DecodePixelData' function of the tinyexr.h file in version 0.9.5 of tinyexr. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Remediation There is no fixed version for tinyexr. References - GitHub Issue...

[SECURITY] Fedora 27 Update: nodejs-base64-url-2.2.0-1.fc27

Base64 encode, decode, escape and unescape for URL applications...

[SECURITY] Fedora 28 Update: nodejs-base64-url-2.2.0-1.fc28

Base64 encode, decode, escape and unescape for URL applications...

Mcard Mobile Card Selling Platform 1 Cross Site Request Forgery

Exploit Title: Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery Date: 2018-05-23 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/mcard-mobile-card-selling-platform/19307193?srank=15 Version: 1 Tested on: Kali linux POC : CSRF POC document.forms0.submit;...

MiniUPnP ngiflib DecodeGifImg' Function Denial of Service Vulnerability

MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability exists i...

HDF5 'H5D__btree_decode_key' function divide by zero error vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Dbtreedecodekey' function in the H5Dbtree.c file in HDF5 version 1.10.2. A remote...

HDF5 Out-of-Bounds Read Vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. An out-of-bounds read vulnerability exists in the 'H5Ofillnewdecode' and 'H5Ofillolddecode' functions of the H5Ofill.c file in...

UBUNTU-CVE-2018-11203

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

DEBIAN-CVE-2018-11203

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

DEBIAN-CVE-2018-11206

An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

UBUNTU-CVE-2018-11206

An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

PT-2018-10393

Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.2 Description A division by zero issue was found in the H5D btree decode key function in H5Dbtree.c. This could potentially allow a remote denial of service attack. Recommendations For version 1.10.2, consider updating to a...

PT-2018-10396 · Hdf +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.2 Description: An out of bounds read was discovered in the H5O fill new decode and H5O fill old decode functions in the H5Ofill.c file of the HDF5 library. This issue could allow a remote denial of service or information...