716 matches found
CVE-2018-10471
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...
CVE-2018-10471: Out-of-bounds Write
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...
PT-2018-9891
Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.11 Description: An issue in Xen allows x86 PV guest OS users to cause a denial of service via unexpected INT 80 processing. This is due to an incorrect fix for a previous issue, leading to an out-of-bounds zero write a...
Design/Logic Flaw
In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User...
CVE-2017-13288
In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User...
CVE-2017-13288
In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User...
CVE-2017-13288: Incorrect Calculation
In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User...
CVE-2018-8977
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...
chakra: Stack-use-after-scope in char16_t const* PlatformAgnostic::Intl::FormatNumber<int>
Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6197060945575936 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-scope READ 3 Crash Address: 0x7f3d2ffda0c0 Crash State: char16t const...
Linux/x86 - Bind TCP (64713/TCP) Shell (/bin/sh) Shellcode (83 bytes)
/ linux/x86 portbind /bin/sh port 64713 83 bytes http://www.gonullyourself.org sToRm / char shellcode = // : "\x6a\x66" // push $0x66 "\x58" // pop %eax "\x31\xdb" // xor %ebx,%ebx "\x53" // push %ebx "\x43" // inc %ebx "\x53" // push %ebx "\x6a\x02" // push $0x2 "\x89\xe1" // mov %esp,%ecx...
PT-2018-16840
Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.2 Description The issue is related to a large loop in the get raw sample int function in imagew-main.c, specifically when libjpeg 8d is used. Recommendations For ImageWorsener version 1.3.2, consider updating libjpeg ...
PT-2017-7252
Name of the Vulnerable Software and Affected Versions Payment Form for PayPal Pro plugin versions prior to 1.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the cp ppp admin int message list.inc.php file. These vulnerabilities are located in the 1 cp...
int.1plus1.ua XSS vulnerability
Open Bug Bounty ID: OBB-422858 Description| Value ---|--- Affected Website:| int.1plus1.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
PT-2018-9696
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue might allow local users to cause a denial of service. This is related to the kill something info function in kernel/signal.c, which can be affected when an unspecified architecture an...
CVE-2017-9951: Undefined Security Weakness
The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...
Fedora 26 : jbig2dec (2017-b7234d284e)
Prevent segserv due to int overflow 1443898 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
GNU PSPP 'hash_int' Denial of Service Vulnerability
PSPP is a free software application for analyzing sampled data, designed to be used as a free alternative to IBM SPSS Statistics. A denial of service vulnerability exists in GNU PSPP 'hashint'. An attacker could exploit this vulnerability to cause a remote denial of service via specially designed...
PT-2017-11506
Name of the Vulnerable Software and Affected Versions GNU PSPP versions prior to 0.11.0 Description The issue is related to an Integer overflow in the hash int function of the libpspp library. This can lead to a crash when processing invalid SPSS data, such as when converting it into CSV format. ...
