746 matches found
PT-2018-16840
Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.2 Description The issue is related to a large loop in the get raw sample int function in imagew-main.c, specifically when libjpeg 8d is used. Recommendations For ImageWorsener version 1.3.2, consider updating libjpeg ...
PT-2017-7252
Name of the Vulnerable Software and Affected Versions Payment Form for PayPal Pro plugin versions prior to 1.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the cp ppp admin int message list.inc.php file. These vulnerabilities are located in the 1 cp...
int.1plus1.ua XSS vulnerability
Open Bug Bounty ID: OBB-422858 Description| Value ---|--- Affected Website:| int.1plus1.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
PT-2018-9696
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue might allow local users to cause a denial of service. This is related to the kill something info function in kernel/signal.c, which can be affected when an unspecified architecture an...
CVE-2017-9951: Undefined Security Weakness
The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...
Fedora 26 : jbig2dec (2017-b7234d284e)
Prevent segserv due to int overflow 1443898 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
GNU PSPP 'hash_int' Denial of Service Vulnerability
PSPP is a free software application for analyzing sampled data, designed to be used as a free alternative to IBM SPSS Statistics. A denial of service vulnerability exists in GNU PSPP 'hashint'. An attacker could exploit this vulnerability to cause a remote denial of service via specially designed...
PT-2017-11506
Name of the Vulnerable Software and Affected Versions GNU PSPP versions prior to 0.11.0 Description The issue is related to an Integer overflow in the hash int function of the libpspp library. This can lead to a crash when processing invalid SPSS data, such as when converting it into CSV format. ...
CVE-2017-9187
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7...
CVE-2017-9183
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7...
CVE-2017-9200
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63...
CVE-2017-9199
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19...
CVE-2017-9163
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54...
CVE-2017-9198
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18...
CVE-2017-9197
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55...
CVE-2017-9200
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63...
CVE-2017-9183
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7...
CVE-2017-9183
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7...