CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

CVE-2017-15931

radare2 2.0.1 has a vulnerability in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c that can trigger by crafted 32-bit ELF files, causing an integer exception that leads to invalid memory access. Several sources (CNVD-2017-36084, NVD, OSV variants) identify this as a 32-bit out-of-b...

CVE-2017-15932

CVE-2017-15932 affects radare2 2.0.1. A vulnerability in store_versioninfo_gnu_verdef() within libr/bin/format/elf/elf.c can trigger an integer exception (negative number) when parsing ELF version data from crafted ELF files on 32‑bit systems, leading to an invalid memory access. This has been ci...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

USN-3463-1 python-werkzeug vulnerability

It was discovered that Werkzeug did not properly handle certain web scripts. A remote attacker could use this to inject arbitrary code via a field that contains an exception message...

USN-3463-1: Werkzeug vulnerability

It was discovered that Werkzeug did not properly handle certain web scripts. A remote attacker could use this to inject arbitrary code via a field that contains an exception message...

Cross site scripting

Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 as used in Pallets Flask and other products allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message...

PYSEC-2017-43

Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 as used in Pallets Flask and other products allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message...

DEBIAN-CVE-2016-10516

Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 as used in Pallets Flask and other products allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message...

CVE-2016-10516

Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 as used in Pallets Flask and other products allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message...

Tor: Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy

Hi Team, Steps to Reproduce: 1. Open Tor 2. Navigate to string.html Where string.html : function tor var uristring = unescape"%u4141%u4141"; fori=0; i 3. 'Gah! This tab has crashed. However, running it to debug mode generates the below exception : !!! ParentMessageChannel Error:...

MGASA-2017-0378 Updated poppler packages fix security vulnerabilities

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document. CVE-2017-14518 In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling...

Microsoft Windows Kernel Pool nt!RtlpCopyLegacyContextX86 Memory Disclosure Vulnerability

The Microsoft Windows kernel pool suffers from a nt!RtlpCopyLegacyContextX86 related memory disclosure vulnerability. Windows Kernel pool memory disclosure in nt!RtlpCopyLegacyContextX86 CVE-2017-11784 One kernel memory disclosure in the exception handling code has already been discovered and...

CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...