342 matches found
CVE-2017-11546
CVE-2017-11546 affects TiMidity++ 2.14.0. The vulnerability is in the insert_note_steps function (readmidi.c) and Allows a crafted MIDI file to trigger a divide-by-zero and crash the application (potentially relevant when running with --background). Connected advisories confirm a security patch; ...
CVE-2017-11546
The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...
CVE-2017-11547
The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...
Code Execution Vulnerability in FineCMS Frontend Mid Parameter
FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the frontend mid parameter of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...
EMC Isilon OneFS and EMC IsilonSD Man-in-the-Middle Attack Vulnerabilities
EMC Isilon OneFS and EMC IsilonSD Edge are both products from EMC Corporation USA. The former is a distributed file system that supports EMC Isilon a horizontally scalable storage system, and the latter is a data management solution for simplifying data management in remote offices or edge...
Mozilla Firefox referrer policy bypass vulnerability
Mozilla Firefox is a popular open source WEB browser. When opening links via mid-click and context menus, Mozilla Firefo fails to properly enforce referer policies when handling meta tags, allowing remote attackers to perform unauthorized actions bypassing security restrictions...
CentOS 7 : kernel (CESA-2014:1023)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Microsoft Windows Media 6.4/10.0 - MID Malformed Header Chunk DoS
No description provided by source. source: http://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected...
Microsoft Windows Explorer explorer.exe WMV File Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected...
INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC
No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...
RealNetwork RealPlayer 10.5 MID File Handling Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22050/info RealNetwork RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue allows remote attackers to crash the applicatio...
AnyMacro Mail安宁邮件系统存在SQL注入漏洞
简要描述： 给客户做测评发现的.因为需要登录所以定义为中级别. 详细说明： 这是附件的下载选项.由于对mid参数没有做验证,导致出现SQL注入漏洞 漏洞证明： 这是附件的下载选项.由于对midmailid参数没有做验证,导致出现SQL注入漏洞...
CVE-2013-2388
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...
CVE-2013-2388
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...
CVE-2013-2388
CVE-2013-2388 in Oracle E‑Business Suite (Oracle Applications Technology Stack) affects versions 11.5.10.2, 12.0.6, and 12.1.3, with an unspecified vulnerability related to Mid Tier File Management that could impact availability. The connected documents do not provide concrete details on the exac...
DEBIAN-CVE-2012-1584
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted file header field in a media file, which triggers a large memory allocation...
CVE-2010-5007
Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...
WordPress Plugin Glossary - SQL Injection
Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary, Wordpress Plugin, vulnerability is SQL...