Lucene search
+L

7494 matches found

NVD
NVD
added 2017/03/20 4:59 p.m.24 views

CVE-2014-9847

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

9.8CVSS7.8AI score0.04584EPSS
SaveExploits0References10
OSV
OSV
added 2017/03/20 4:59 p.m.10 views

CVE-2014-9847

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

9.8CVSS7.6AI score
SaveExploits0References20
OSV
OSV
added 2017/03/20 4:59 p.m.6 views

DEBIAN-CVE-2014-9847

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

9.8CVSS9AI score0.04584EPSS
SaveExploits0References1
Prion
Prion
added 2017/03/20 4:59 p.m.27 views

Code injection

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

7.5CVSS6.9AI score0.04584EPSS
SaveExploits0References10Affected Software10
Cvelist
Cvelist
added 2017/03/20 4:0 p.m.33 views

CVE-2014-9847

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

6.8AI score0.04584EPSS
SaveExploits0References10
CVE
CVE
added 2017/03/20 4:0 p.m.121 views

CVE-2014-9847

ImageMagick CVE-2014-9847 concerns the jng decoder. Multiple connected sources confirm a remote denial-of-service possibility: a crafted JNG file can cause the application to crash. The vulnerability affects ImageMagick 6.8.9.9 (jng decoder) and is described in CNVD-2017-04496 as a DoS in the jng...

9.8CVSS6.7AI score0.04584EPSS
SaveExploits0References10Affected Software8
Debian CVE
Debian CVE
added 2017/03/20 4:0 p.m.70 views

CVE-2014-9847

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact...

9.8CVSS9.5AI score0.04584EPSS
SaveExploits0
Virtuozzo
Virtuozzo
added 2017/03/16 12:0 a.m.43 views

Important kernel security update: Virtuozzo ReadyKernel patch 14.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

The cumulative Virtuozzo ReadyKernel patch updated with security fixes. The patch applies to Virtuozzo versions 7.0.0, 7.0.1, and 7.0.3. Vulnerability id: CVE-2017-6074 A use-after-free flaw was found in the way the Linux kernel's Datagram Congestion Control Protocol DCCP implementation freed SKB...

7.8CVSS6.8AI score0.0596EPSS
SaveExploits13References5
CNVD
CNVD
added 2017/03/03 12:0 a.m.9 views

Cisco NetFlow Generation Appliance SCTP decoder denial of service vulnerability

Cisco NetFlow Generation Appliance is the United States Cisco Cisco company's set of scalable for data centers to achieve traffic visibility solutions. A denial of service vulnerability exists in the processing of SCTP messages by the SCTP decoder in the Cisco NetFlow Generation Appliance. A remo...

7.5CVSS6.8AI score0.01697EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/03/02 12:0 a.m.146 views

SUSE SLES11 Security Update : openssl (SUSE-SU-2017:0585-1)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed bsc1019334 - CVE-2016-8610: A remote denial of service in...

10CVSS7.4AI score0.77906EPSS
SaveExploits2References14
NVD
NVD
added 2017/03/01 9:59 p.m.21 views

CVE-2017-3826

A vulnerability in the Stream Control Transmission Protocol SCTP decoder of the Cisco NetFlow Generation Appliance NGA with software before 1.11a could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service DoS condition. The...

7.5CVSS7.7AI score0.01697EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/01 9:59 p.m.7 views

CVE-2017-3826

A vulnerability in the Stream Control Transmission Protocol SCTP decoder of the Cisco NetFlow Generation Appliance NGA with software before 1.11a could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service DoS condition. The...

7.5CVSS5.8AI score0.01697EPSS
SaveExploits0References3
Prion
Prion
added 2017/03/01 9:59 p.m.22 views

Race condition

A vulnerability in the Stream Control Transmission Protocol SCTP decoder of the Cisco NetFlow Generation Appliance NGA with software before 1.11a could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service DoS condition. The...

5CVSS7.7AI score0.01697EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/03/01 9:0 p.m.54 views

CVE-2017-3826

Cisco NetFlow Generation Appliances NGA 3140, NGA 3240, and NGA 3340 contain a DoS vulnerability in the SCTP decoder due to incomplete validation of SCTP packets on monitored data ports. An unauthenticated remote attacker can cause the device to hang or reload by sending malformed SCTP packets; p...

7.5CVSS7.6AI score0.01697EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/03/01 3:59 p.m.8 views

UBUNTU-CVE-2017-5502

libjasper/jp2/jp2dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

5.5CVSS6.1AI score0.01333EPSS
SaveExploits1References4
CNVD
CNVD
added 2017/02/28 12:0 a.m.20 views

Iceni Argus Remote Heap Buffer Overflow Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus LZW decoder to deal with special PDF files have a buffer overflow vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the...

9.3CVSS7.3AI score0.02252EPSS
SaveExploits1References1
Prion
Prion
added 2017/02/27 9:59 p.m.17 views

Heap overflow

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

9.3CVSS8.1AI score0.02252EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2017/02/27 9:59 p.m.20 views

CVE-2016-8387

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

9.3CVSS8.3AI score0.02252EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2017/02/27 9:0 p.m.41 views

CVE-2016-8387

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

8.8CVSS8AI score0.02252EPSS
SaveExploits1References2
Fedora
Fedora
added 2017/02/26 1:42 a.m.18 views

[SECURITY] Fedora 25 Update: python-cjson-1.1.0-9.fc25

This module implements a very fast JSON encoder/decoder for Python. JSON stands for JavaScript Object Notation and is a text based lightweight data exchange format which is easy for humans to read/write and for machines to parse/generate. JSON is completely language independent and has multiple...

0.6AI score
SaveExploits0
Rows per page
Query Builder