OX App Suite 7.8.4 - Multiple Vulnerabilities

OX App Suite 7.8.4 - Multiple Vulnerabilities Product: OX App Suite Vendor: OX Software GmbH Internal reference: 55872 Bug ID Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.8.4 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Remediation There is no fixed version for tinyexr. References - GitHub Issue...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h. Remediation There is no fixed version for tinyexr. References - GitHub Issue...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. Remediation There is no fixed version for tinyexr. References - Github.com...

[SECURITY] [DSA 4207-1] packagekit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4207-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 22, 2018 https://www.debian.org/security/faq -...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop. Remediation There is no fixed version for readstat. References - Github.com...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors savparsemachineintegerinforecord in spss/readstatsavread.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconvopen call. Remediation There is no fixed version for readstat. References -...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash v...

RSA Authentication Manager XML Injection / Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS vulnerabilities product: RSA Authentication Manager vulnerable version: 8.2.1.4.0-build1394922, 8.3 P1 fixed version: 8.3 P1 and later CVE number: CVE-2018-1247...

Cross site scripting

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in the local user creation functionality. This is fixed in version...

CVE-2018-10164

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version...

Juniper NSM < 2012.2R14 OpenSSL Multiple Vulnerabilities (JSA10851)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R14. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. Remediation There is no fixed version for vorbis. References - Gitlab.xiph.org...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can displ...

Double Free

Overview Affected versions of this package are vulnerable to Double Free. A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to...

Out-of-Bounds

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Out-of-Bounds. A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display ...

CVE-2018-10238

bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded NPDU. The function bvlcbdtforwardnpdu calls bvlcencodeforwardednpdu which copies the content from...

Buffer overflow

bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded NPDU. The function bvlcbdtforwardnpdu calls bvlcencodeforwardednpdu which copies the content from...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap,...