1531 matches found
PT-2017-12857
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the ISO ES-IS parser, specifically in the esis print function within print-isoclns.c. This could allow a remote attacker to obtain sensitive information by...
PT-2017-12890
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO ES-IS parser, specifically in the esis print function within the print-isoclns.c file. Recommendations For versions prior to 4.9.2, update to...
PT-2017-12837
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IS-IS parser, specifically in the isis print extd ip reach function within print-isoclns.c. This problem can lead to potential security issues...
Cisco NX-OS IS-IS Packet Processing Denial of Service Vulnerability
According to its self-reported version, the Cisco NX-OS Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
minidjvu denial of service vulnerability (CNVD-2017-25768)
minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the rowisempty function in base/4bitmap.c:274 in Minidjvu,...
DEBIAN-CVE-2017-12442
The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
UBUNTU-CVE-2017-12441
The rowisempty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
UBUNTU-CVE-2017-12442
The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
PT-2017-12554
Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...
PT-2017-12555
Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in base/4bitmap.c at line 272, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...
libming 'OpCode' function denial of service vulnerability (CNVD-2017-20196)
libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. The OpCode function called from isLogicalOp and decompileIF in util/decompile.c in Libming suffers from a heap-based buffer over-reading problem that allows an attacker to cause a denial of service via...
python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs
A redirect flaw, where the issafeurl function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard...
theroadiscalling.com XSS vulnerability
Vulnerable URL: http://www.theroadiscalling.com/Jobs.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10209128 VIP website status:| No Check theroadiscalling.com SSL connection:|...
Hacker leaks 'Orange is the New Black' Season 5 after Netflix refused to Pay Ransom
After releasing 10 back-to-back episodes of the Season 5 premiere of Netflix's "Orange Is the New Black," a hacking group calling itself The Dark Overlord is threatening to leak a trove of other unreleased TV shows and movies. The Dark Overlord TDO posted links to the first 10 episodes of the...
ALPINE-CVE-2017-7233
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects namely django.utils.http.issafeurl considered some numeric URLs "safe" when they shouldn't be, aka an open...
iFdate Social Dating Script 2.0 - SQL Injection
Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://turnkeycentral.com/scripts/social-dating-script/ Demo: http://demo.turnkeycentral.com/ifdate/index.php Version: 2.0 Tested on: Win7 x64,...
PT-2017-9929
Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the is what parameter in the activate address function. Recommendations For Exponent CMS versions 2.3...
[SECURITY] Fedora 24 Update: quagga-0.99.24.1-5.fc24
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
[SECURITY] Fedora 25 Update: quagga-0.99.24.1-5.fc25
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...