Design/Logic Flaw

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

PT-2018-17131

Name of the Vulnerable Software and Affected Versions: Artifex MuJS versions 1.0.2 and earlier Description: The issue is related to the improper maintenance of the AST depth for binary expressions in jsparse.c, which can be exploited by remote attackers to cause a denial of service through...

CVE-2018-5759: Uncontrolled Recursion

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

SA158: Improper Restriction of Excessive Authentication Attempts in Reporter

SUMMARY Symantec Reporter does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter. AFFECTED PRODUCTS Reporter --- CVE | Affected Versions | Remediation CVE-2017-15531 | 10...

PT-2018-15495

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.20 Description The issue concerns the SAP BPO CONFIG role in SAP Solution Manager, which provides the Business Process Operations BPO configuration user with more authorization than necessary for configuring the...

CVE-2018-5252: Excessive Iteration

libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...

CVE-2018-4868

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

PT-2018-16581

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause a denial of service due to excessive memory allocation via a crafted file. This is related to the Exiv2::Jp2Image::readMetadata function in jp2image.cpp. Recommendations...

PT-2018-19200

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause a denial of service due to excessive memory allocation via a crafted file. This is related to the Exiv2::Jp2Image::readMetadata function in jp2image.cpp. Recommendations...

CVE-2018-4868: Allocation of Resources Without Limits or Throttling

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

Security update for ImageMagick (important)

This update for ImageMagick fixes the following issues: CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 Memory le...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2017-1339)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The coffslurplinetable function in coffcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1,...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1362)

This update for GraphicsMagick fixes the following issues : - CVE-2017-12140: ReadDCMImage in coders\dcm.c has a ninteger signedness error leading to excessive memory consumption bnc1051847 - CVE-2017-14994: NULL pointer in ReadDCMImage in coders/dcm.c could lead to denial of service bnc1061587 -...

The vulnerability of the Application Control component of Kaspersky Embedded Systems Security allows for the execution of an application not listed in the white list.

The vulnerability of the Application Control component of Kaspersky Embedded Systems Security antivirus software arises due to the improper functioning of protection mechanisms under conditions of excessive service load. Exploiting this vulnerability allows a malicious actor to elevate their...