7638 matches found
DEBIAN-CVE-2018-12536
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...
Security update for python-python-gnupg (moderate)
This update for python-python-gnupg to version 0.4.3 fixes the following issues: The following security vulnerabilities were addressed: - Sanitize diagnostic output of the original file name in verbose mode CVE-2018-12020 boo1096745 The following other changes were made: - Add --no-verbose to the...
Security Bulletin: Vulnerability in Stack trace may be thrown if no default error page was set up and exception occurred IBM Algorithmics AlgoCore
Summary IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by improper handling of exceptions when a default error page does not exist. Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM WebSphere Application Server Liberty could...
Microsoft Windows: MS Security Guide: Enable Structured Exception Handling Overwrite Protection
If this setting is enabled, SEHOP is enforced. If this setting is disabled or not configured, SEHOP is not enforced for 32-bit processes. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Privilege escalation
Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handlin...
SUSE-SU-2018:1662-1 Security update for poppler
This update for poppler fixes the following issues: These security issues were fixed: - CVE-2017-14517: Prevent NULL Pointer dereference in the XRef::parseEntry function via a crafted PDF document bsc1059066. - CVE-2017-9865: Fixed a stack-based buffer overflow vulnerability in GfxState.cc that...
CVE-2017-5382
CVE-2017-5382 affects Mozilla Firefox prior to 51.0. The feed preview for RSS feeds can expose internal errors/exceptions generated by privileged content, potentially revealing sensitive information. Rationale: described in the CVE entry and corroborated by multiple advisories (OpenSUSE/Mageia/Ub...
Denial Of Service (DoS)
libpoppler.so is vulnerable to denial of service DoS attacks. A malicious user can pass a pdf file to the isImageInterpolationRequired function in Splash.cc to cause a floating point exception that can crash the application or overwrite memory...
WebKit - WebAssembly Compilation Info Leak
WebKit - WebAssembly Compilation Info Leak arrayBufferView-vector : staticcastarrayBuffer-impl-data; If the source buffer is a view DataView or TypedArray, arrayBufferView-vector is returned. The vector method returns the start of the data in the buffer, including any offset. However, the functio...
WebKit - WebAssembly Compilation Info Leak
arrayBufferView-vector : staticcastarrayBuffer-impl-data; If the source buffer is a view DataView or TypedArray, arrayBufferView-vector is returned. The vector method returns the start of the data in the buffer, including any offset. However, the function createSourceBufferFromValue copies the...
Easy MPEG to DVD Burner SEH + DEP Bypass Local Buffer Overflow Vulnerability
Easy MPEG to DVD Burner is a freeware for Windows, mainly used as a DVD format converter for MPEG and DAT files. A security vulnerability exists in Easy MPEG to DVD Burner. An attacker can exploit this vulnerability to gain administrator access...
SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1536-1)
This update for the Linux Kernel 4.4.59-9224 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Intel ...
SUSE-SU-2018:1537-1 Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-606466 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Inte...
Design/Logic Flaw
hapi is a web and services application framework. When hapi = 15.0.0 = 16.1.0 encounters a malformed accept-encoding header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached...
Apple Mac OS X Security Updates (HT208849)-03
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-11627
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
Cross site request forgery (csrf)
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
CVE-2018-11627
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
