MistServer Cross-Site Scripting Vulnerability

MistServer is a full-featured next-generation streaming toolkit for OTT Internet streaming. A cross-site scripting vulnerability exists in versions of MistServer prior to 2.13. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2016-3900 · Grassroots · Grassroot Dicom

Name of the Vulnerable Software and Affected Versions: Grassroots DICOM versions prior to 2.6.2 Description: The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service via an embedded JPEG-LS image with dimensions larger than the selected...

Wireshark S7COMM Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...

PT-2015-3271

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.3 Description The issue is related to the xmlStringLenDecodeEntities function in parser.c of the libxml2 library, which is associated with resource management errors. Exploitation of this issue may allow a remote...

Apple iOS/OS X/watchOS ImageIO memory corruption vulnerability (CNVD-2015-07102)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versio...

FFmpeg allocate_buffers denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'allocatebuffers' function in the libavcodec/alac.c file in versions of FFmpeg prior to 2.7.2, which stems from the program's failure to initialize...

PT-2013-2624 · Mozilla +1 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 20.0 Firefox ESR versions prior to 17.0.5 Thunderbird versions prior to 17.0.5 Thunderbird ESR versions prior to 17.0.5 SeaMonkey versions prior to 2.17 Description: The issue allows local users to gain...