Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2018-11854)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in the parsing of the U3D Texture Width framework in Foxit Reader version 9.0.0.29935, which stems from the program failing to properly validate the length of user-submitted data,...

UBUNTU-CVE-2018-7159

The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the Node.js HTTP parser has been...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-10042)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm SD 820A and other central processing unit CPU products of Qualcomm for different platforms. A buffer out-of-bounds read vulnerability exists in the Qualcomm...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-06670)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

UBUNTU-CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

Advantech WebAccess Stack Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

Delta Industrial Automation WPLSoft dvp File Buffer Overflow Vulnerability

Delta Industrial Automation is a global industrial automation manufacturer of power management and thermal solutions. WPLSoft and PMSoft are Delta's PLC programming software. A buffer overflow vulnerability exists in the Delta Industrial Automation WPLSoft dvp file due to a failure to validate th...

Advantech WebAccess nvA1Media Connect MediaUsername Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

CVE-2017-0296: Buffer Copy without Checking Size of Input

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory...

CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is...

PT-2017-18030 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions through 7.1.4 Description: The issue allows attackers to cause a denial of service via operations on long strings, resulting in memory consumption and application crash. The vendor disputes this, stating that GMP safely aborts in...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

DEBIAN-CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

CVE-2015-7975

Removed by vendor...

Telegram 3.2 - Input Length Handling Crash (PoC)

Telegram 3.2 - Input Length Handling Crash PoC + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on...

Telegram 3.2 - Input Length Handling Crash PoC Vulnerability

Exploit for macOS platform in category dos / poc + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 o...

Telegram 3.2 - Input Length Handling Crash (PoC)

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Telegram 3.2 Denial Of Service

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Easy FTP Server 1.7.0.2 Remote BoF

Other vulnerabilities covered in bid:38262 === Infos === Credit: loneferret Found: 18/02/10 Versions affected = 1.7.0.2 === Description === Lack of input length checks for the CWD command result in a buffer overflow vulnerability, allowing the execution of arbitrary code by a remote attacker. ===...