MariaDB Server 10.1.x < 10.1.20 Multiple DoS

Binary data 9914.prm...

DEBIAN-CVE-2016-9907

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

PT-2017-7829

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue allows remote attackers to cause a denial of service by leveraging incorrect cleanup of JP2 box data on error, specifically through the jp2 colr destroy function in jp2 cod.c. This is due...

PT-2017-9858

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference in the jp2 colr destroy function. Recommendations For versions prior to 1.900.10, update to version...

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in the JasPer function jp2colrdestroy, which can be exploited by an attacker to crash an application and deny service to a legitimate user...

ALPINE-CVE-2016-7413

Use-after-free vulnerability in the wddxstackdestroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field...

PT-2016-3381

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11 Description The issue is related to a use-after-free vulnerability in the wddx stack destroy function. This vulnerability can be exploited by remote attackers via a wddxPacket XML...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...

Google Chrome DoS

The vulnerability of the RenderWidgetHostImpl::Destroy function located in the content/browser/rendererhost/renderwidgethostimpl.cc file of the Google Chrome browser’s Navigation implementation is related to the use of memory after it is released. Exploiting this vulnerability could allow a remot...

Destroy Iphone - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Destroy Iphone published at the 'play' market has multiple vulnerabilities...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2016-1647

CVE-2016-1647 is a use-after-free in Chrome’s Navigation path, specifically in RenderWidgetHostImpl::Destroy within content/browser/renderer_host/render_widget_host_impl.cc, before version 49.0.2623.108. The vulnerability allows remote attackers to cause a denial of service and potentially other ...

UBUNTU-CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2016-1647: Undefined Security Weakness

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

PT-2016-1613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.108 Opera versions prior to 49.0.2623.108 Description A use-after-free issue exists in the RenderWidgetHostImpl::Destroy function, which is part of the Navigation implementation. This could allow remot...

rubygem-activerecord: Nested attributes rejection proc bypass in Active Record

A flaw was found in the Active Record component's handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes...

rubygem-activerecord: Nested attributes rejection proc bypass in Active Record

A flaw was found in the Active Record component's handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes...