UBUNTU-CVE-2015-4734

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS...

CVE-2015-4648

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4647

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

Stack overflow

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4648

Panasonic Security API SDK (ipropsapivideo) contains a stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control’s MulticastAddr method. The underlying flaw is a lack of boundary checks on a long string passed to MulticastAddr, enabling remote code execution. Affected component...

CVE-2015-4647

CVE-2015-4647 concerns the Panasonic Security API SDK’s Ipropsapi ActiveX Control . Multiple stack-based buffer overflows exist in the GetStringInfo method and the FilePassword property, exploitable by supplying a very long string. This could allow a remote attacker to execute arbitrary code in t...

CVE-2015-4647: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

CVE-2015-4648: Improper Input Validation

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

Panasonic Security API SDK Stack Buffer Overflow Vulnerability

The Panasonic Security API SDK is a webcam API interface development kit SDK from Panasonic Japan. A stack buffer overflow vulnerability exists in the 'GetStringInfo' method of the Panasonic Security API SDK. A remote attacker could exploit the vulnerability by setting the value of the...

postgresql: unanticipated errors from the standard library

It was discovered that PostgreSQL did not properly check the return values of certain standard library functions. If the system was in a state that would cause the standard library functions to fail for example, memory exhaustion, an authenticated user could possibly exploit this flaw to disclose...

PT-2015-6650

Name of the Vulnerable Software and Affected Versions Panasonic Security API PS-API ActiveX SDK versions prior to 8.10.18 Description The issue concerns stack-based buffer overflows in the Ipropsapi component of the Panasonic Security API PS-API ActiveX SDK. This can be exploited by remote...

PT-2015-6651

Name of the Vulnerable Software and Affected Versions Panasonic Security API PS-API ActiveX SDK versions prior to 8.10.18 Description The issue is related to a stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo. This occurs when a long string is passed ...

Panasonic Security API SDK ipropsapivideo ActiveX Control MulticastAddr Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Security API. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Panasonic Security API SDK Ipropsapi ActiveX Control GetInfoString Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability could allow remote attackers to execute arbitrary code on vulnerable installations of the Panasonic Security API SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in...

DEBIAN-CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2013-5960

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic...

CVE-2013-5679

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protectio...

CVE-2013-5679

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protectio...

CVE-2013-5679: Undefined Security Weakness

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protectio...

PT-2013-5884

Name of the Vulnerable Software and Affected Versions OWASP Enterprise Security API ESAPI for Java versions prior to 2.1.0.1 Description The authenticated-encryption feature in the symmetric-encryption implementation does not properly resist tampering with serialized ciphertext. This makes it...