11 matches found
CVE-2015-2058
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...
PT-2015-5574
Name of the Vulnerable Software and Affected Versions libin versions prior to 1.31 jabberd2 affected versions not specified Description The issue allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which...
PT-2015-5573
Name of the Vulnerable Software and Affected Versions Jabber Open Source Server versions 2.3.2 and earlier Description The issue allows remote authenticated users to potentially read system memory or have other unspecified impact by providing a crafted JID, due to the truncation of data without...
CVE-2014-3714
The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service crash via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow...
CVE-2014-3717
Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service crash via a crafted kernel, which triggers a buffer overflow...
PT-2014-5468
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x Description A buffer overflow issue allows local users to read system memory or cause a denial of service via a crafted 32-bit guest kernel. This is related to the process of searching for an appended DTB. Recommendations Fo...
PT-2014-5470
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x Description The issue allows local users to read system memory or cause a denial of service via a crafted kernel, triggering a buffer overflow, due to improper validation of the load address for 64-bit ARM guest kernels...
CVE-2014-3714: Improper Input Validation
The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service crash via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow...
PT-2014-5012
Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.3 through 8.3 before p16 FreeBSD versions 8.4 through 8.4 before p9 FreeBSD versions 9.1 through 9.1 before p12 FreeBSD versions 9.2 through 9.2 before p5 FreeBSD versions 10.0 through 10.0 before p2 Description The issue is...
CVE-2012-6619: Improper Input Validation
The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service crash or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read...
PT-2014-2388
Name of the Vulnerable Software and Affected Versions MongoDB versions prior to 2.3.2 Description The issue concerns the default configuration of MongoDB, where objects are not validated. This allows remote authenticated users to cause a denial of service or read system memory by sending a crafte...