Tor: Zip bomb

Vulnerability description not provided...

Code injection

In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service application hang in LockSemaphoreInfo via a PNG file with a width equal to MAGICKWIDTHLIMIT...

CVE-2017-13140

In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service application hang in LockSemaphoreInfo via a PNG file with a width equal to MAGICKWIDTHLIMIT...

CVE-2017-13140: Improper Restriction of Operations within the Bounds of a Memory Buffer

In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service application hang in LockSemaphoreInfo via a PNG file with a width equal to MAGICKWIDTHLIMIT...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2017-223310)

Mozilla Firefox browser Firefox is a free and open source browser for Windows, Linux and MacOSX platforms. A denial of service vulnerability exists in Mozilla Firefox. An attacker can exploit this vulnerability to cause affected applications to crash or hang, resulting in a denial of service...

PT-2017-12927

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-1 and 7.0.6-2 Description The issue allows remote attackers to cause a denial of service, resulting in an application hang, via a specifically crafted PNG file. This occurs when the PNG file has a width equa...

PT-2017-11297

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.19 and earlier Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a ha...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

UBUNTU-CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2017-3643

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-3640

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-10036

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NFSv4. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFSv4 to compromise Solaris. Successful attacks of this...

CVE-2017-3637

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2017-10711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks can result in...

PT-2017-11140

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized...

PT-2017-11134

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in the unauthorized ability to cause a...

PT-2017-10805

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony First Edition version 1.7.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition, requiring human interaction from a person othe...

gtk-vnc security, bug fix, and enhancement update

0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...

PT-2017-3922 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.6.37 and earlier Oracle MySQL versions 5.7.19 and earlier Description: The issue is related to an uncontrolled consumption of system resources in the MySQL Server component, specifically in the InnoDB subcomponent. Thi...

SUSE-SU-2017:1990-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 Realtime kernel was updated to 4.4.74 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently...