The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in processing input data, which can lead to corruption of the heap. Exploiting this vulnerability allows a remote attacker to trigger a service failure through a specially crafted HTML page...

The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...

The vulnerability of the AMF protocol processing mechanism in Cisco Secure ACS’s security access control system allows a perpetrator to execute arbitrary commands.

The vulnerability of the AMF processing mechanism in the Cisco Secure ACS security control system is related to deficiencies in input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted AMF message...

The vulnerability of the message filtering function of the Cisco AsyncOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco AsyncOS operating system’s message filtering function is related to insufficient processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted email message...

The vulnerability in the implementation of the Link Layer Discovery Protocol (LLDP) in Cisco FX-OS and Cisco NX-OS network operating systems allows a attacker to cause service interruptions.

The vulnerability in the implementation of the Link Layer Discovery Protocol LLDP for Cisco FX-OS and Cisco NX-OS network operating systems arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted LLD...

The vulnerability of the FortiOS operating system’s SSL-VPN implementation, caused by errors in processing input data, allows a hacker to replace encrypted traffic with malicious data.

The vulnerability of the SSL-VPN implementation in the FortiOS operating system arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to replace encrypted traffic using a specially generated MAC...

The vulnerability in the implementation of the Microsoft Server Message Block 2.0 network protocol on Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Server Message Block 2.0 SMBv2 network protocol in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information with the help of speciall...

Intel Extreme Tuning Utility Buffer Overflow Vulnerability

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel USA. A buffer overflow vulnerability exists in the input processing in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a denial of service to the...

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a w...

The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization software allows a intruder to gain access to control resources or execute arbitrary code.

The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization solution arises from incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain access to resources or execute arbitrary codes...

OSIsoft PI JDBC Driver and PI ODBC Driver Denial of Service Vulnerabilities

OSIsoft PI JDBC Driver and PI ODBC Driver are drivers for connecting to access databases from OSIsoft, USA. A de-security vulnerability exists in OSIsoft PI JDBC Driver and PI ODBC Driver SQL Data Access Server fails to properly process input, which could be exploited by remote attackers to submi...

Multiple Remote Code Execution Vulnerabilities in Dell SonicWALL GMS Virtual Appliance

SonicWALL offers Internet security solutions for small, medium and distributed businesses. A security vulnerability exists in the Dell GMS ViewPoint GMSVP web application. The vulnerability stems from the inability to filter user data before executing commands when processing configuration input...

MGASA-2015-0257 Updated tidy package fixes security vulnerability

A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input...

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in processing input through API, which may result in SQL injection. Impact A user who can log in to the system may alter information stored in the database. Solution Apply the Patch Apply the appropria...

Oracle Linux 5 : cups (ELSA-2008-0192)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0192 advisory. - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. Tenable has...

Fedora 7 : cups-1.2.12-11.fc7 (2008-3449)

Fri May 9 2008 Tim Waugh 1:1.2.12-11 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. - Tue Apr 1 2008 Tim Waugh 1:1.2.12-10 - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing,...

CVE-2008-1098

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 certain input processed by formatter/textgedit.py aka the gui editor formatter; 2 a page name, which triggers an injection in PageEditor.py when the...

Firefox DoS

Invalid INPUT tag designMode property processing...

Debian DSA-720-1 : smartlist - wrong input processing

Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription

-------------------------------------------------------------------------- Debian Security Advisory DSA 720-1 [email protected] http://www.debian.org/security/ Martin Schulze May 3rd, 2005 http://www.debian.org/security/faq -...