Design/Logic Flaw

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

UBUNTU-CVE-2016-5825

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5824

CVE-2016-5824 affects the libical iCalendar library (libical 1.0) with a use-after-free that can lead to a denial of service via a crafted ICS file. Multiple connected sources corroborate this as a vulnerability in libical, with downstream advisories recommending upgrading to newer libical releas...

CVE-2016-5823

CVE-2016-5823 : The icalproperty_new_clone function in libical 0.47 and 1.0 is vulnerable to a crafted ICS file that can trigger a use-after-free, leading to a denial of service. The provided documentation explicitly lists this as the affecting condition and impact. No additional details on root ...

CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5825

Removed by vendor...

CVE-2016-5823

Removed by vendor...

CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

Belden Hirschmann GECKO (Update A)

CVSS v3 7.1 ATTENTION: Remotely Exploitable/low skill level to exploit. Vendor: Belden Equipment: Hirschmann GECKO --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: Path Traversal, Server-Side Request Forgery, Cross-Site Request Forgery, Information Exposure --------- End Update A...

Default Credentials Found in Schneider Electric Wonderware Historian

The Industrial Control System Cyber Emergency Response Team ICS-CERT on Tuesday published an advisory warning of a critical vulnerability in Schneider Electric Wonderware Historian, a platform used to capture, store and manage big data. The vulnerability, CVE-2017-5155, can be exploited to target...

Schneider Electric Wonderware Historian

CVSS V3 7.3 ATTENTION: Remotely exploitable/Low skill level to exploit Vendor: Schneider Electric Equipment: Wonderware Historian Vulnerability: Credentials Management AFFECTED PRODUCTS The following Wonderware Historian versions are affected: Wonderware Historian 2014 R2 SP1 P01 and earlier...

Schneider Electric homeLYnk Controller

CVSS V3 6.3 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Schneider Electric Equipment: homeLYnk Controller, LSS100100 Vulnerability: Cross-site Scripting AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following products: homeLYnk Controller,...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...