2756 matches found
cfme: Incorrect sanitization in regular expression engine
An input validation flaw was found in the way CloudForms regular expressions were passed to the expression engine via both the JSON API and the web based UI. A user with the ability to view collections and filter them could use this flaw to execute arbitrary shell commands on the host with the...
The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.
The vulnerability of the Mac OS X operating system’s login window exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...
The vulnerability of the Android operating system, which allows a hacker to trigger a service failure
The vulnerability of the Android operating system’s telephony component exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure by changing the value of NITZ to 19.01.2016 or later, thereby misconfiguring the system time...
UBUNTU-CVE-2014-9886
arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815575 and Qualcomm interna...
RHEL 7 : golang (RHSA-2016:1538) (httpoxy)
An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability in the decoder/ih264dprocessintramb.c file of the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure memory corruption by using a specially...
CentOS 7 : golang (CESA-2016:1538) (httpoxy)
An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Go: sets environmental variable based on user supplied Proxy request header
An input-validation flaw was discovered in the Go programming language built in CGI implementation, which set the environment variable "HTTPPROXY" using the incoming "Proxy" HTTP-request header. The environment variable "HTTPPROXY" is used by numerous web clients, including Go's net/http package,...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.
In the procedure “sub4101B4”, there is no validation of the correctness of the input data at addresses “0x004104D1”, “0x004105AB”, and “0x004105EA”. This may lead to buffer overflows during the processing of RPC calls numbered 0x13 and 0x12 “0x0040C73C”. This vulnerability allows a malicious...
The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.
The Internet Explorer browser contains an unspecified vulnerability related to the lack of validation of user-input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to trigger a service failure or execute arbitrary code through a specially created website...
Vulnerability of the PHP interpreter and the Mac OS X operating system, allowing attackers to execute arbitrary code
The vulnerability of the phpsnmperror function ext/snmp/snmp.c in the PHP interpreter and the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
squid: Cache poisoning issue in HTTP Request handling
An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an error message “Assertion failure” or the termination of the daemon—by using a specially creat...
HP Universal Configuration Management Database Foundation Redirection Vulnerability
The HP Universal Configuration Management Database UCMDB Foundation is a suite of database software from Hewlett-Packard HP that stores, controls, and manages software and infrastructure components and their interrelationships. A security vulnerability exists in HP UCMDB Foundation that stems fro...
The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the Adobe Type Manager library on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system freeze using a special OpenType font...
The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure
The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a local attacker to trigger a service failure host reboot by manipulating numerous MMIO pages with various cache settings...
The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to execute arbitrary code or cause a service failure memory corruption by using specially crafted message packets...
The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the Network Policy Server component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted requests...
The vulnerability of the Firebird database management system allows a perpetrator to cause a service failure.
The vulnerability of the Firebird database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by using the service dispatcher to execute the gbak utility with incorrect parameters...