Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

Debian DLA-1191-1 : python-werkzeug security update

A security issue that allows XSS on the Werkzeug debugger allows remote attackers to inject arbitrary stuff via a field that contains an exception message. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.3+dfsg-1+deb7u1. We recommend that you upgrade your python-werkzeug...

FreeBSD : mediawiki -- multiple vulnerabilities (298829e2-ccce-11e7-92e4-000c29649f92)

mediawiki reports : security fixes : T128209: Reflected File Download from api.php. Reported by Abdullah Hussam. T165846: BotPasswords doesn't throttle login attempts. T134100: On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password. T178451:...

CVE-2017-1000187

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

Code injection

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000187

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

CVE-2017-1000174

CVE-2017-1000174 concerns SWFTools where an address access exception is triggered in swfdump swf_GetBits(). The issue affects SWFTools components handling SWF data and is described across multiple sources (NVD entry, Red Hat, SUSE, Ubuntu OSV, CNVD) as a vulnerability in swfdump swf_GetBits(), wi...

CVE-2017-1000187

Removed by vendor...

CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000187

In SWFTools, pdf2swf contains a vulnerability in FoFiTrueType::writeTTF() that triggers an address access exception. Affected component: SWFTools’ pdf2swf module (FoFiTrueType::writeTTF). Documented impact indicates potential denial of service. CVSS data provided: CVSS v2 base score 4.3 (Medium) ...

CVE-2017-1000174

Removed by vendor...

SWFTools Address Access Exception Vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in swfdump swfGetBits in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2017-8808

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping...

Fedora 25 : poppler (2017-805d9423f8)

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928. ---- Security fix for CVE-2017-14617 ---- Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929. ---- - CVE-2017-14520 Floating point exception in Splash::scaleImageYuXd Note that Tenable Network...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2017-1260)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry function in XRef.cc via a crafted PDF document.CVE-2017-14517 - In...

EulerOS 2.0 SP1 : poppler (EulerOS-SA-2017-1259)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry function in XRef.cc via a crafted PDF document.CVE-2017-14517 - In...

Node.js Denial of Service Vulnerability (CNVD-2017-36052)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Null pointer dereference

On Linux running on PowerPC hardware Power8 or later a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception interrupt, and use the r1 value from the signal frame as the kernel stack pointer. As part of the exception entry the content of the signa...