7641 matches found
UBUNTU-CVE-2015-5277
The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...
CloudBees Jenkins Arbitrary Code Execution Vulnerability
CloudBees Jenkins is the U.S. CloudBees company a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An arbitrary code execution vulnerability...
The vulnerability of the WildFly application server and the JBoss Enterprise Application Platform, which allows a hacker to induce a service failure.
The vulnerability of the Java server consoles of WildFly and the JBoss Enterprise Application Platform lies in buffer overflows. Exploiting this vulnerability allows a malicious actor to cause a service failure by creating a request with an excessively long header...
elfutils: directory traversal in read_long_names()
Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...
PT-2015-6828 · Gnu +4 · Glibc +4
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.20 Description: The issue is related to the get contents function in the Name Service Switch NSS in GNU C Library, which might allow local users to cause a denial of service or gain privileges via a long line in the...
Multiple Vulnerabilities in Long Term Evolution Devices
Long Term Evolution LTE is a 4G wireless broadband technology developed by the Third Generation Partnership Project 3GPP project team. Authentication bypass, security bypass, and session fixation vulnerabilities exist in LTE Devices. An attacker could exploit these vulnerabilities to gain...
USN-2812-1 libxml2 vulnerabilities
Florian Weimer discovered that libxml2 incorrectly handled certain XML data. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS,...
CVE-2015-5213
Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...
Long Term Evolution Information Disclosure Vulnerability
Long Term Evolution is a 4G wireless broadband technology developed by the 3GPP project team. Long Term Evolution suffers from an information disclosure vulnerability that could be exploited by an attacker to obtain sensitive information via a man-in-the-middle attack...
PowerDNS Recursor and Authoritative Server Denial of Service Vulnerabilities
PowerDNS Recursor, Authoritative Server are both products of the Dutch company PowerDNS.PowerDNS Recursor is a domain name resolution server.PowerDNS Authoritative Server is a DNS server. A security vulnerability exists in the label decompression feature of PowerDNS Recursor and Authoritative...
UBUNTU-CVE-2015-5213
Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...
Latest EMET Bypass Targets WoW64 Windows Subsystem
Backwards compatibility, a necessary evil for Microsoft in its need to support so many legacy applications on Windows, may be its undoing as researchers have found a way to exploit this layer in the operating system to bypass existing mitigations against memory-based exploits. Specifically in thi...
PT-2015-6835
Name of the Vulnerable Software and Affected Versions PolarSSL versions 1.x through 1.2.16 ARM mbed TLS formerly PolarSSL versions 1.3.x through 1.3.13 ARM mbed TLS formerly PolarSSL versions 2.x through 2.1.1 Description A heap-based buffer overflow issue exists, allowing remote SSL servers to...
CVE-2007-6423
Unspecified vulnerability in modproxybalancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue...
CVE-2007-4887
The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability...
CVE-2009-0282
Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...
CVE-2007-6039
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...
CVE-2011-2928
The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...
CVE-2007-1412
The cpdfopen function in the ClibPDF cpdf extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information script source code via a long string in the second argument...