ROS-20240828-03

Vulnerability of Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to the incorrect handling of exceptional conditions with improper handling of exceptional conditions. Exploitation of the vulnerability could allow a remote attacker to use memory after it has been...

CVE-2021-31598

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...

SUSE-SU-2015:2338-1 Security update for xen

This update fixes the following security issues: - bsc955399 - Fix xm migrate --logprogress. Due to logic error progress was not logged when requested. - bsc956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc956592 - xen: virtual PMU is unsupport...

NCH Software Express Burn Plus 4.68 - .EBP Project File Buffer Overflow

NCH Software Express Burn Plus 4.68 - .EBP Project File Buffer Overflow !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a progra...

SUSE-SU-2015:0551-1 Security update for glibc

This update for glibc contains the following fixes: Fix integer overflows in malloc CVE-2013-4332, bnc839870 Fix buffer overflow in glob bnc691365 Fix buffer overflow in strcoll CVE-2012-4412, bnc779320 Update mount flags in bnc791928 Fix buffer overrun in regexp matcher CVE-2013-0242, bnc801246...

HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication SEH Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ This should bypass the following snort rule referenced...

peercast01216.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Debian DSA-866-1 : mozilla - several vulnerabilities

Several security-related problems have been discovered in Mozilla and derived programs. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2871 Tom Ferris discovered a bug in the IDN hostname handling of Mozilla that allows remote attackers to cause a...

GLSA-200504-22 : KDE kimgio: PCX handling buffer overflow

The remote host is affected by the vulnerability described in GLSA-200504-22 KDE kimgio: PCX handling buffer overflow kimgio fails to properly validate input when handling PCX files. Impact : By enticing a user to load a specially crafted PCX image in a KDE application, an attacker could execute...

LibPNG 1.2.5 - png_jmpbuf() Local Buffer Overflow

LibPNG 1.2.5 - pngjmpbuf Local Buffer Overflow include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not...

IBM SecureWay Directory is vulnerable to denial-of-service attacks via LDAP handling code

Overview The IBM SecureWay Directory contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product, t...