5873 matches found
exiv2: null-pointer dereference in http.c causing denial of service
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...
BELL-CVE-2020-11869 CVE-2020-11869 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the libseccomp library lies in its lack of access control for certain functions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the libseccomp library is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
BELL-CVE-2020-2781 CVE-2020-2781 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-2757 CVE-2020-2757 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-2800 CVE-2020-2800 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-0551 CVE-2020-0551 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to execute arbitrary commands.
The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager DCNM system exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on t...
The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Investor Servicing financial management software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Investor Servicing financial management software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
BELL-CVE-2019-19246 CVE-2019-19246 does not affect BellSoft software
Bulletin has no description...
PT-2019-5691 · Exiv2 +8 · Exiv2 +8
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.2 Description: The issue is related to a lack of validation in the Exiv2 library, specifically in the crwimage int.cpp module, which can lead to a crash when the getULong function is called from CiffDirectory::readDirectory...
BELL-CVE-2019-17075 CVE-2019-17075 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-16232 CVE-2019-16232 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-15098 CVE-2019-15098 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-13626 CVE-2019-13626 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-12455 CVE-2019-12455 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-2684 CVE-2019-2684 does not affect BellSoft software
Bulletin has no description...
PT-2019-2589 · Red Hat · Openshift Container Platform +1
Name of the Vulnerable Software and Affected Versions: Heketi versions as shipped with Openshift Container Platform 3.11 Description: The issue is related to the lack of an authentication procedure in the standard settings of Heketi, a network software tool. This could allow a remote attacker to...