JasPer JPEG-2000 library 'mif_process_cmpt' function memory misreference vulnerability

JasPer JPEG-2000 library is a Canadian software developer Michael Adams developed an open source JPEG-2000 encoding library . A memory misreference vulnerability exists in the 'mifprocesscmpt' function in the libjasper/mif/mifcod.c file in versions of the JasPer JPEG-2000 library prior to 1.900.2...

PYSEC-2017-13

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

mpg123 'III_i_stereo' denial of service vulnerability

mpg123 is a MPEG audio player and decoding library for Linux and Unix operating systems developed by software developer Michael Hipp. A security vulnerability exists in the 'IIIistereo' function in the libmpg123/layer3.c file in mpg123 versions prior to 1.25.1. A remote attacker can exploit this...

ALPINE-CVE-2017-9469

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash...

[SECURITY] Fedora 25 Update: libpng12-1.2.57-1.fc25

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 24 Update: libpng12-1.2.57-1.fc24

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 25 Update: libpng15-1.5.28-1.fc25

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

DEBIAN-CVE-2015-8378

In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile...

CVE-2016-8233

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

DEBIAN-CVE-2017-6305

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write."...

CVE-2016-9312

ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet...

DEBIAN-CVE-2016-9432

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service memory corruption, segmentation fault, and crash via a crafted HTML page...

PT-2017-7798 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.14 Description: A race condition exists in the L2TPv3 IP Encapsulation feature, allowing local users to gain privileges or cause a denial of service. This issue is related to the net/l2tp/l2tp ip.c and...

UBUNTU-CVE-2016-9432

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service memory corruption, segmentation fault, and crash via a crafted HTML page...

CVE-2016-7505

A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition...

RubyGems Administrate Cross-Site Request Forgery Vulnerability

RubyGems is a Ruby package manager organized by RubyGems.Administrate is one of the plugins that supports developers to customize the content. A cross-site request forgery vulnerability exists in RubyGems Administrate versions prior to 0.1.5. An attacker could use this vulnerability to perform...

DEBIAN-CVE-2016-3069

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository...

PT-2018-12655

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description An issue was discovered in the chmd.c file of libmspack, where an off-by-one error in the CHM PMGI/PMGL chunk number validity checks could lead to denial of service. This occurs due to an...

[SECURITY] Fedora 22 Update: libpng12-1.2.56-1.fc22

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

UBUNTU-CVE-2015-4456

ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a...