8921 matches found
Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04654)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...
PT-2015-3444
Name of the Vulnerable Software and Affected Versions OpenSSH versions through 6.9 Description The issue is related to the kbdint next device function in the OpenSSH sshd service, which does not properly restrict the processing of keyboard-interactive devices within a single connection. This make...
Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04649)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...
Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04653)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...
Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04652)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...
Enter: No rate limit which leads to "Users information Disclosure" including verfification documents etc.
HOST api.romit.io Endpoint /v0/cash/auth/login Issue When an attacker tries to login at app.romit.io, he is prompted to enter the PIN . There is no rate limit to verify this. Although there is a an authorization header Authorization: Credential=b67b0b10571ac00444de3cffde0b5b05,...
kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.
It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...
shopnc o2o版三处SQL注入打包
简要描述： 直接出数据 详细说明： 先来五个互联网实例 http://www.0795hui.com/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1 http://www.hfmy.cc/modules/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1...
libxml2: Denial of service
Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description libxml2 returns the empty string when the allocation limit is encountered while constructing the attribute value string. Impact A remote attacker may be able to cause Denial of Service via a specially...
SUSE SLED11 / SLES11 Security Update : icu (SUSE-SU-2015:1144-1)
This update fixes the following security issue in icu : CVE-2014-9654: insufficient size limit checks in regular expression compiler bsc917129 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
Security update for cups (critical)
This update fixes the following issues: - CVE-2015-1158 and CVE-2015-1159 fixes a possible privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server CUPS STR4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159 bugzilla.suse.com bsc924208. In genera...
Elasticsearch 1.5.2 File Creation Vulnerability
Elasticsearch versions 1.0.0 through 1.5.2 are vulnerable to an engineered attack on other applications on the system. The snapshot API may be used indirectly to place snapshot metadata files into locations that are writeable by the user running the Elasticsearch process. It is possible to create...
Seagate Central unauthenticated file upload
Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...
CVE-2015-2922
The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
DEBIAN-CVE-2015-2922
The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
CVE-2015-2922
The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
CVE-2015-2922
The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...
chromium-browser: Negative-size parameter in Libvpx.
Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame...
Google Chrome - size-limit value denial of service vulnerability
Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in Google Chrome - size-limit value. It allows remote attackers to launch denial-of-service attacks via crafted VP9 video data...
DEBIAN-CVE-2015-1258
Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame...