8451 matches found
Citrix Licensing Server Vendor Daemon Stops Intermittently
License Administration Console reports an alert stating the Vendor Daemon is down. The server displays the following error: Citrix XenApp cannot contact the license server And / or Qfarm /Load reports a load of 20000...
CVE-2018-12122
It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service. Mitigation The use of a Load Balancer or a Reverse Prox...
DEBIAN-CVE-2019-20022
An invalid memory address dereference was discovered in loadpnm in frompnm.c in libsixel before 1.8.3...
PT-2019-16057 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.3 Description: An invalid memory address dereference was found in the load pnm function in frompnm.c. Recommendations: For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue...
UBUNTU-CVE-2019-19331
knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...
Unspecified Vulnerability in Broadcom CA Automic Sysload
Broadcom CA Automic Sysload is a device load monitoring system from Broadcom USA. The system supports performance management, performance diagnostics and system evaluation. A security vulnerability exists in Broadcom CA Automic Sysload that can be exploited by an attacker to execute arbitrary...
Microsoft Windows Windows Printer Service Privilege Vulnerability
Microsoft Windows is a family of operating systems from Microsoft.Microsoft Windows Windows Printer Service is a printing service in Microsoft Windows. A privilege vulnerability exists in Microsoft Windows Windows Printer Service, which originates when the program does not properly validate the...
libsixel buffer overflow vulnerability (CNVD-2020-12707)
libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'loadsixel' function of the loader.c file in libsixel version 1.8.2, which originates when a networked system or product perform...
stb_image.h Buffer Overflow Vulnerability
stbimage.h is an image library. A buffer overflow vulnerability exists in the 'stbiloadmain' function in stbimage.h version 2.23 used in libsixel and other products, which arises from a networked system or product that does not properly validate data boundaries when executing an operation in...
PT-2019-15952 · Stb +1 · Stb Image.H +1
Name of the Vulnerable Software and Affected Versions: stb image.h aka the stb image loader version 2.23 Description: The issue is a heap-based buffer over-read in the stbi load main function. This problem affects products that use the stb image loader, including libsixel. Recommendations: For...
PT-2019-15953 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer over-read issue was discovered in the load sixel function at loader.c. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer version that...
CVE-2019-4606
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM...
CVE-2019-4606
CVE-2019-4606 affects IBM DB2 High Performance Unload for LUW versions 6.1 and 6.5. The vulnerability is an untrusted search path issue that could allow a local attacker to execute arbitrary code by using an executable file. IBM and related advisories describe impact as local code execution with ...
DEBIAN-CVE-2017-18640
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
CVE-2017-18640
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
UBUNTU-CVE-2017-18640
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
Design/Logic Flaw
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
CVE-2017-18640
CVE-2017-18640 affects SnakeYAML; the vulnerability arises from entity expansion (Billion Laughs style) during load, allowing abuse of the alias feature. Affected versions are before 1.26 (e.g., SnakeYAML 1.25.x onward) with public mentions in multiple advisories showing a fix in 1.26. Fedora/Alm...
