Lucene search
K

884 matches found

CNVD
CNVD
added 2017/09/22 12:0 a.m.2 views

libsndfile d2ulaw_array() function out-of-bounds read vulnerability (CNVD-2017-34008)

Libsndfile is a C library for reading and writing files containing sampled sounds e.g. MS Windows WAV and Apple/SGI AIFF formats through a standard library interface. An out-of-bounds read vulnerability exists in the d2ulawarray function in ulaw.c in Libsndfile, which can be exploited by a remote...

8.1CVSS6.5AI score0.02229EPSS
Exploits0References1
CNVD
CNVD
added 2017/09/22 12:0 a.m.1 views

libsndfile d2alaw_array() function out-of-bounds read vulnerability

Libsndfile is a C library for reading and writing files containing sampled sounds e.g. MS Windows WAV and Apple/SGI AIFF formats through a standard library interface. An out-of-bounds read vulnerability in the d2alawarray function in alaw.c in Libsndfile could lead to a remote denial-of-service...

8.1CVSS6.4AI score0.02043EPSS
Exploits0References1
OSV
OSV
added 2017/09/21 1:29 p.m.1 views

DEBIAN-CVE-2017-14245

An out of bounds read in the function d2alawarray in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.6AI score0.02043EPSS
Exploits0References1
OSV
OSV
added 2017/09/21 1:29 p.m.1 views

DEBIAN-CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.8AI score0.02229EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/09/21 12:0 a.m.27 views

CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.8AI score0.02229EPSS
Exploits0References3
OSV
OSV
added 2017/09/21 12:0 a.m.0 views

UBUNTU-CVE-2017-14246

An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values...

8.1CVSS6.8AI score0.02229EPSS
Exploits0References4
OSV
OSV
added 2017/08/10 12:0 a.m.1 views

UBUNTU-CVE-2017-7781

An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINTATINFINITY" when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an...

5.9CVSS6.7AI score0.02755EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2017/06/18 12:0 a.m.7 views

PT-2017-2282 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.11.5 Linux Kernel versions 2.6.23 through 4.11.5 Description: The issue is related to the implementation of the Stack Guard-Page mechanism in the Linux Kernel, which does not properly check the values of...

10CVSS7.3AI score0.52189EPSS
Exploits109References873
Prion
Prion
added 2017/05/02 2:59 p.m.11 views

Code injection

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

7.5CVSS9.4AI score0.03522EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/05/02 2:59 p.m.2 views

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

9.8CVSS6.1AI score0.03522EPSS
Exploits0References2
NVD
NVD
added 2017/05/02 2:59 p.m.14 views

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

9.8CVSS9.5AI score0.03522EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/05/02 2:0 p.m.17 views

CVE-2017-6551

Pexip Infinity before 14.2 allows remote attackers to cause a denial of service service restart or execute arbitrary code via vectors related to Conferencing Nodes...

9.6AI score0.03522EPSS
Exploits0References2
CVE
CVE
added 2017/05/02 2:0 p.m.48 views

CVE-2017-6551

CVE-2017-6551 : The provided records indicate that Pexip Infinity, versions prior to 14.2, is affected by a vulnerability in Conferencing Nodes that can be remotely triggered to cause a denial of service (service restart) or to execute arbitrary code. The exact vulnerable component or root cause ...

9.8CVSS9.4AI score0.03522EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/04/24 12:0 a.m.2 views

Pexip Infinity Remote Code Execution Vulnerability

Pexip Infinity is a virtual videoconferencing cloud collaboration platform from Pexip Norway. The platform works with standard protocol H.323, SIP based videoconferencing endpoints and videoconferencing infrastructures and is characterized by WAN bandwidth savings. A security vulnerability exists...

9.8CVSS7.3AI score0.03522EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2016/09/08 1:49 p.m.7 views

krasnodar.infinity-promo.ru Open Redirect vulnerability

Vulnerable URL: http://krasnodar.infinity-promo.ru/www/www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:41 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1690009 VIP website...

6.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/07/14 12:0 a.m.20 views

Fedora 24 : 2:docker (2016-6ef52e1fc3)

Resolves: 1340519 - add TasksMax=infinity ---- built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit f476348 ---- built docker @projectatomic/fedora-1.10.3 commit 4158ccc ---- Resolves: 1335649 - enable Red Hat subscription use in Docker...

7.8CVSS7.2AI score0.00388EPSS
Exploits0References2
hackapp
hackapp
added 2016/04/01 10:17 a.m.12 views

Disney Infinity: Toy Box 2.0 - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Infinity: Toy Box 2.0 published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:3 a.m.14 views

Infinity Dungeon Evolution! - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Infinity Dungeon Evolution! published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:17 a.m.18 views

LAUNCH DAY(INFINITY ORIGINALS) - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application LAUNCH DAYINFINITY ORIGINALS published at the 'play' market has multiple vulnerabilities...

0.7AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:49 a.m.8 views

My Disney Infinity Collection - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application My Disney Infinity Collection published at the 'play' market has multiple vulnerabilities...

0.4AI score
Exploits0References1Affected Software1
Rows per page
Query Builder