GraphicsMagick ReadDIBImage Buffer Overflow DoS

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially created dib file...

CVE-2019-19094

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Sql injection

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

CVE-2019-19094

CVE-2019-19094 affects ABB eSOMS versions 3.9 to 6.0.3 and is caused by lack of input validation for SQL queries in the backend, enabling potential SQL injection. The vulnerability has a high CVSS v3.1 base score of 7.6 (network, low attack complexity, privileges required: low; confidentiality im...

FortiAuthenticator XSS

The vulnerability of the FortiAuthenticator identification system’s web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute cross-site scripting XSS attacks...

FuzeZip Buffer Overflow Vulnerability (CNVD-2020-02441)

FuzeZip is a compression tool from Koyote-Lab. A buffer overflow vulnerability exists in FuzeZip that stems from the program not properly performing boundary value checks on user-supplied input, causing the program to copy data that is larger than the allocated memory buffer space. An attacker...

Hyper-V Hardware Virtualization Disclosure

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created application...

Linux mremap Physical Page Access

The vulnerability in the implementation of the mremap system call in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to gain access to the physical page...

Cisco Small Business Router Web Interface Redirection

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 is related to errors in checking input parameters of HTTP requests. Exploiting this vulnerability can allow a malicious actor to redirect users to a malicious website remotely...

samba -- multiple vulnerabilities

The samba project reports: Samba releases 4.7.0 to 4.8.3 inclusive contain an error which allows authentication using NTLMv1 over an SMB1 transport either directory or via NETLOGON SamLogon calls from a member server, even when NTLMv1 is explicitly disabled on the server. Missing input sanitizati...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

Mac OS X File Component DoS

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

USIM Responder Android Data Compromise

The vulnerability of the Android operating system from the CAF repository exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information during the processing of...

PLC WinProladder Stack Buffer Overflow Vulnerability

winproladder is a free PLC programming software. PLC WinProladder suffers from a stack buffer overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the affected applicati...

Autotrace Heap Buffer Overflow Vulnerability

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. Autotrace suffers from a heap buffer overflow vulnerability that stems from the program failing to perform proper boundary checks on user-submitted input. An attacker could exploit this vulnerability to cras...

Apache Struts Access Restriction Bypass

The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...

Cisco Unified Communications Manager DoS

The vulnerability of the Cisco Unified Communications Manager IP telephony management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

DSA-3581-1 libndp - security update

Bulletin has no description...

SoX Memory Corruption Vulnerability

SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A memory corruption vulnerability exists in SoX that stems from the program failing to perform proper boundary checks on user-submitted input. An attacker could...

TestDisk 'Check_OS2MB()' method stack buffer overflow vulnerability

TestDisk is a set of disk repair tools. A stack buffer overflow vulnerability exists in the TestDisk 'CheckOS2MB' method. Due to the program failing to perform proper boundary checking on user-submitted input. An attacker could exploit this vulnerability to execute arbitrary code in the context o...