434 matches found
Unbit uWSGI Stack Buffer Overflow Vulnerability
Unbit uWSGI is a set of open source application server that supports multiple languages . A stack buffer overflow vulnerability exists in the 'uwsgiexpandpath' function in the core/utils.c file in Unbit uWSGI 2.0.15 and earlier. An attacker can exploit this vulnerability to cause stack corruption...
CVE-2017-18077
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
Code injection
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
CVE-2017-18077
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...
SQL Injection Vulnerability in ThinkLC Classifieds Expand.php Page
ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the thinkLC Classified Information System expand.php page. The vulnerability is caused due to the system failing to effectively filter...
Sound eXchange Buffer Overflow Vulnerability (CNVD-2017-34599)
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A stack buffer overflow vulnerability exists in the 'lsxmsadpcmblockexpandi' function of the adpcm.c file in SoX version 14.4.2. An attacker can...
PoDoFo Denial of Service Vulnerability (CNVD-2017-04559)
PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the PoDoFo :: PdfPainter :: ExpandTabs function in PdfPainter.cpp in PoDoFo version 0.9.5, where a remote attacker can cause a denial of service heap buffer overflow and...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document. Remediation...
Security update for java-1_7_0-openjdk (important)
This update for java-170-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 bsc1020905: Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution -...
PT-2017-7727 · Unrtf +1 · Unrtf +1
Name of the Vulnerable Software and Affected Versions: unrtf version 0.21.9 Description: The issue is caused by multiple stack-based buffer overflows that allow remote attackers to cause a denial-of-service. This can be achieved by writing a negative integer to the 1 cmd expand function, 2 cmd...
DEBIAN-CVE-2016-9180
perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting...
V8: integer overflow leading to buffer overflow in Zone::New
An integer-overflow flaw was found in V8's Zone class when allocating new memory Zone::New and Zone::NewExpand. An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges...
DEBIAN-CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...
SUSE-SU-2015:1439-1 Security update for perl-XML-LibXML
perl-XML-LibXML was updated to fix the expandentities option to be preserved in all cases. CVE-2015-3451...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the CJBig2Image::expand function in Google Chrome browsers is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by manipulating input data remotely...
UBUNTU-CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
CVE-2015-1279
CVE-2015-1279 : Integer overflow in CJBig2_Image::expand within PDFium (fxcodec/jbig2/JBig2_Image.cpp) used by Google Chrome before 44.0.2403.89 leads to a heap-based buffer overflow when processing large height/stride values. Impact described as remote denial of service (and unspecified other im...
CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
