xpdf denial of service vulnerability (CNVD-2018-06676)

Xpdf is an open source PDF file viewer, this software runs on X Window as well as Motif. xpdf also runs on all classes of Unix operating systems. xpdf 4.00 in the JBIG2Stream.cc in the JBIG2Stream::readGenericBitmap function there is a denial of service vulnerability. An attacker can exploit this...

GNU libcdio 'get_cdtext_generic()' function double release vulnerability

GNU libcdio is a CD-ROM input and control library that contains a library of functions for accessing CD-ROMs and CD images. A security vulnerability exists in the 'getcdtextgeneric' function in the lib/driver/cdiogeneric.c file in GNU libcdio versions prior to 2.0.0. A local attacker can exploit...

UBUNTU-CVE-2017-18201

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in getcdtextgeneric in lib/driver/cdiogeneric.c...

BMC Server Automation RSCD Agent - NSH Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BMC Server Automation RSCD Agent NSH Remote ' \ 'Command Execution', 'Description' = %q This module exploits a weak access control check in the B...

OpenJDK: GSS context use-after-free (JGSS, 8186212)

It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context...

camping1402.rssing.com XSS vulnerability

On the 19.01.2018 security researcher reported a XSS vulnerability affecting the camping1402.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 January...

OpenJDK: GSS context use-after-free (JGSS, 8186212)

It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context...

OpenJDK: GSS context use-after-free (JGSS, 8186212)

It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context...

1915.rssing.com XSS vulnerability

On the 18.01.2018 security researcher reported a XSS vulnerability affecting the 1915.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 January, 2018...

ensonhaber.com XSS vulnerability

On the 18.01.2018 security researcher reported a XSS vulnerability affecting the ensonhaber.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 January, 2018...

The vulnerability of the `usbnet_generic_cdc_bind` function (drivers/net/usb/cdc_ether.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the usbnetgenericcdcbind function located in the drivers/net/usb/cdcether.c file in the Linux kernel arises due to errors during the zero-division operation. Exploitation of this vulnerability can allow an attacker, operating locally, to cause service failures or other effect...

monsall.rssing.com XSS vulnerability

On the 17.01.2018 security researcher reported a XSS vulnerability affecting the monsall.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 17 January, 20...

UBUNTU-CVE-2018-2634

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JGSS. Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

alliance.rssing.com XSS vulnerability

On the 15.01.2018 security researcher reported a XSS vulnerability affecting the alliance.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15 January,...

freeholder102.rssing.com XSS vulnerability

On the 15.01.2018 security researcher reported a XSS vulnerability affecting the freeholder102.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15...

schule-test.net XSS vulnerability

On the 14.01.2018 security researcher reported a XSS vulnerability affecting the schule-test.net website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 14 January, 2018...

espnplayer.com XSS vulnerability

On the 14.01.2018 security researcher reported a XSS vulnerability affecting the espnplayer.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 14 January, 2018...

c-and-a.com XSS vulnerability

On the 10.01.2018 security researcher reported a XSS vulnerability affecting the c-and-a.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 10 January, 2018 13:0...

warfactory12.rssing.com XSS vulnerability

On the 06.01.2018 security researcher reported a XSS vulnerability affecting the warfactory12.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 6 January...

helmetcityinternational.com XSS vulnerability

On the 03.01.2018 security researcher reported a XSS vulnerability affecting the helmetcityinternational.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 3...