CVE-2018-19568

A floating point exception in kodakradcloadraw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

DEBIAN-CVE-2018-19568

A floating point exception in kodakradcloadraw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

CVE-2018-19567

CVE-2018-19567 stems from a floating point exception in parse_tiff_ifd within dcraw up to version 9.28. The issue could be triggered by processing malicious TIFFs in environments that bundle dcraw code, potentially crashing the host application that uses these components. The Connected documents ...

CVE-2018-19568

A floating point exception in kodakradcloadraw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

Barracuda MAS - (ldap_load_entry.cgi) XSS Vulnerability

Document Title: =============== Barracuda MAS - ldaploadentry.cgi XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2168 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20369 CVE-ID: ======= CVE-2018-20369 Release Date:...

GHSA-GHGJ-3XQR-6JFM Jetty vulnerable to exposure of sensitive information to unauthenticated remote users

The exception handling code in Eclipse Jetty prior to 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak...

Jetty vulnerable to exposure of sensitive information to unauthenticated remote users

The exception handling code in Eclipse Jetty prior to 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak...

Denial Of Service (DoS)

ircdkit is vulnerable to denial of service DoS attacks. A malicious user can connect to the irc server and stop the service by abruptly exiting the connection, causing an exception...

Amazon Linux 2 : kernel (ALAS-2018-1100)

An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel. An attacker with a local account can trick the stack unwinder code to leak stack contents to userspace. The fix allows only root to inspect the kernel stack of an arbitrary task.CVE-2018-17972 A...

Security Bulletin: Information Disclosure in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect for Virtual Environments (CVE-2018-1553)

Summary Information disclosure vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect formerly Tivoli Storage Mangaer for Virtual Environments. Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote...

Buffer Overflow Vulnerability in OhEasy Multimedia Network Classroom Software

Oh easy multimedia network classroom software is a set of multimedia computer to assist teachers to complete the teaching software. A buffer overflow vulnerability exists in the OhEasy Multimedia Network Classroom Software. An attacker can exploit the vulnerability to cause a buffer overflow by...

School Equipment Monitoring System 1.0 - login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: School Equipment Monitoring System 1.0 - 'login' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Concurrency. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated...

Security update for net-snmp (important)

This update for net-snmp fixes the following issues: Security issues fixed: - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

SUSE SLES12 Security Update : net-snmp (SUSE-SU-2018:3319-1)

This update for net-snmp fixes the following issues : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. bsc111112...

SUSE-SU-2018:3333-1 Security update for net-snmp

This update for net-snmp fixes the following issues: Security issues fixed: - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value

Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value Here's a code snippet from sleh.c with the second level exception handler for undefined instruction exceptions: static void handleuncategorizedarmsavedstatet state, booleant instrLen2 exceptiontypet exception =...

Apple iOS - Kernel Stack Memory Disclosure due to Failure to Check copyin Return Value

Here's a code snippet from sleh.c with the second level exception handler for undefined instruction exceptions: static void handleuncategorizedarmsavedstatet state, booleant instrLen2 exceptiontypet exception = EXCBADINSTRUCTION; machexceptiondatatypet codes2 = EXCARMUNDEFINED; machmsgtypenumbert...