Lucene search
K

4739 matches found

BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.1 views

The vulnerability of the asf_build_simple_index() function in the FFmpeg multimedia library (libavformat/asfdec_f.c) allows a attacker to cause a service failure.

The vulnerability of the asfbuildsimpleindex function in the FFmpeg multimedia library libavformat/asfdecf.c arises from the lack of checking for the end-of-file flag during the processing of ASF files. This leads to repeated execution of the for loop, which is related to the large size of the...

7.1CVSS7.2AI score0.01013EPSS
Exploits0References3Affected Software1
Kitploit
Kitploit
added 2017/10/16 9:0 p.m.30 views

CyberScan - Tool To Analyse Packets, Decoding , Scanning Ports, And Geolocation

CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including latitude, longitude , region , country ... Operating Systems Supported Windows XP/7/8/8.1/10 GNU/Linux MacOSX Installation You can download CyberSc...

7.3AI score
Exploits0References1
OSV
OSV
added 2017/10/02 5:1 p.m.1 views

USN-3434-1 libidn vulnerability

It was discovered that Libidn incorrectly handled decoding certain digits. A remote attacker could use this issue to cause Libidn to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS7AI score0.01215EPSS
Exploits0References2
OSV
OSV
added 2017/09/29 1:34 a.m.22 views

CVE-2017-7687

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of...

7.5CVSS7AI score
Exploits0References2
Prion
Prion
added 2017/09/29 1:34 a.m.19 views

Path traversal

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of...

5CVSS7.5AI score0.03234EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/09/28 8:0 p.m.24 views

CVE-2017-7687

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of...

7.6AI score0.03234EPSS
Exploits0References2
Gentoo Linux
Gentoo Linux
added 2017/09/26 12:0 a.m.37 views

libTIFF: Multiple vulnerabilities

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description Multiple vulnerabilities have been discovered in LibTIFF. Please review the referenced...

9.8CVSS8.7AI score0.00724EPSS
Exploits8
Tenable Nessus
Tenable Nessus
added 2017/09/14 12:0 a.m.16 views

openSUSE Security Update : mpg123 (openSUSE-2017-1035)

This update for mpg123 fixes the following issues : - Update to version 1.25.6 - Hotfix for bug 255: Overflow reading frame data bits in layer II decoding. Now, all-zero data is returned if the frame data is exhausted. This might have a slight impact on performance, but not easily measurable so...

5.5CVSS6.7AI score0.00474EPSS
Exploits0References2
OSV
OSV
added 2017/09/08 8:29 p.m.2 views

CVE-2017-0757

A remote code execution vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815...

7.8CVSS6.3AI score
Exploits0References2
Cvelist
Cvelist
added 2017/09/06 9:0 p.m.22 views

CVE-2014-6438

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

7.3AI score0.01127EPSS
Exploits0References4
RubySec
RubySec
added 2017/09/06 12:0 a.m.1 views

DoS Vulnerability associated with URI.decode_www_form_component method

The URI.decodewwwformcomponent method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service catastrophic regular expression backtracking, resource consumption, or application crash via a crafted string...

7.5CVSS5.6AI score0.01127EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/08/29 12:0 a.m.3 views

Multiple Westermo devices hard-coded to use encryption key vulnerability

The Westermo MRD-305-DIN, MRD-315 and MRD-355 are all router products from Westermo, Sweden. A security vulnerability exists in multiple Westermo devices. An attacker could exploit the vulnerability to decode traffic from other sources...

7.5CVSS7.8AI score0.00218EPSS
Exploits0References1
NVD
NVD
added 2017/08/18 6:29 p.m.12 views

CVE-2015-9054

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding...

10CVSS8.9AI score0.00086EPSS
Exploits0References2
Prion
Prion
added 2017/08/18 6:29 p.m.12 views

Null pointer dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding...

10CVSS7.1AI score0.00086EPSS
Exploits0References2
CVE
CVE
added 2017/08/18 6:0 p.m.45 views

CVE-2015-9054

Technical details for CVE-2015-9054 are not provided in the connected documents; no explicit affected products, versions, root cause, or fixes are disclosed here. Monitor for updates.

10CVSS7.8AI score0.00086EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/08/18 6:0 p.m.12 views

CVE-2015-9054

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding...

8.4AI score0.00086EPSS
Exploits0References2
OSV
OSV
added 2017/08/15 4:29 p.m.0 views

UBUNTU-CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

8.8CVSS7.5AI score0.0167EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/08/10 12:0 a.m.2 views

The vulnerability of the dnxhddecode_header function in the libavcodec/dnxhddec.c multimedia library of FFmpeg allows a attacker to cause a service failure or exert other effects.

The vulnerability of the dnxhddecodeheader function in the libavcodec/dnxhddec.c multimedia library of FFmpeg relates to reading data beyond the specified buffer boundaries. Exploiting this vulnerability may allow a malicious actor to cause service failure access outside the array or other effect...

6.8CVSS7.4AI score0.0025EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2017/08/04 12:0 a.m.1 views

Zoho ManageEngine OpManager Encryption Algorithm Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A security vulnerability exists in Zoho ManageEngine OpManager versions 11 through 12.2. An attacker can exploit the vulnerability to decode certificates...

9.8CVSS6.8AI score0.01665EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/08/03 12:0 a.m.39 views

RHEL 7 : libtasn1 (RHSA-2017:1860)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1860 advisory. Libtasn1 is a library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structure...

10CVSS7AI score0.09345EPSS
Exploits1References9
Rows per page
Query Builder