The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the h264sliceheaderinit function libavcodec/h264slice.c in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects by using specially crafted H.264...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit module in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application termination through a specially crafte...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the FFmpeg multimedia library exists due to the retention of width and height parameters after a failure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects using a specially created .mov file...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

PHP interpreter vulnerabilities that allow attackers to trigger service failures or cause other adverse effects

The multiple vulnerabilities of the phpescapeshellcmd or phpescapeshellarg functions ext/standard/exec.c in the PHP interpreter are caused by a numerical overflow. Exploitation of these vulnerabilities could allow a malicious actor to cause service failures or potentially have other effects by...

Vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library, which allow a perpetrator to trigger a service failure or exert other effects

The multiple vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service interruptions or potentially have other adverse effects...

Important: ntp

Issue Overview: It was discovered that ntpd as a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to an ntpd client that would effectively disable synchronization with the server, or push arbitrary...

nginx denial of service vulnerability

nginx is an HTTP and reverse proxy server that can also be used as a mail proxy server. A security vulnerability exists in nginx that allows remote attackers to submit special requests for denial of service attacks...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a service failure or cause some other unknown effect.

The vulnerability of the QEMU hardware emulation software is related to incorrect restrictions on commands received from ATAPI devices. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other unspecified effects by using certain IDE commands...

UBUNTU-CVE-2016-0808

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service continuous rebooting via an application that triggers loading of a crafted TTF font, aka...

PT-2018-12655

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description An issue was discovered in the chmd.c file of libmspack, where an off-by-one error in the CHM PMGI/PMGL chunk number validity checks could lead to denial of service. This occurs due to an...

MGASA-2016-0039 Updated ntp packages fix security vulnerability

In ntpd before 4.2.8p6, when used with symmetric key encryption, the client would accept packets encrypted with keys for any configured server, allowing a server to impersonate other servers to clients, thus performing a man-in-the-middle attack. A server can be attacked by a client in a similar...

The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.

The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of Solaris Kernel Zones, a component of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to cause partial service disruption...

The vulnerability of the Oracle Database database management system allows a hacker to gain read access to data or cause partial service disruption.

The vulnerability of the XDB component—the XML Database component of the Oracle Database management system—is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data or cause partial service interruptions through network packe...

The vulnerability of the Solaris operating system allows a perpetrator to gain access to data or cause partial service interruption.

The vulnerability of Solaris Kernel Zones, a component of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to data or cause partial service disruption...

The vulnerability of Solaris Cluster software allows a hacker to gain read access to data, modify data, or cause partial service disruption.

The vulnerability of the HA sub-component for MySQL cluster software in Solaris Cluster is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data, or cause partial service disruption...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the VNC websocket frame decoder in the hardware emulation software QEMU is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures such as increased memory and computational resources usage by sending HTTP header...

CVE-2016-0420

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics...

CVE-2016-0542

The CVE-2016-0542 entry concerns Oracle E-Business Suite's Field Service Map component. Connected records indicate an unspecified vulnerability in the Oracle Field Service component that could allow remote attackers to affect integrity via unknown vectors. The documents provide product and compon...