CVE-2013-3316: Improper Authentication

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg"...

CVE-2019-19982

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send a /wp-admin/admin-post.php?esskip=1&optionname= request...

Stealthy Microsoft SQL Server Backdoor Malware Spotted in the Wild

Cybersecurity researchers claim to have discovered a previously undocumented backdoor specifically designed for Microsoft SQL servers that could allow a remote attacker to control an already compromised system stealthily. Dubbed Skip-2.0, the backdoor malware is a post-exploitation tool that runs...

FreeType Buffer Overflow Vulnerability (CNVD-2019-30720)

FreeType is an open source font rendering library written in the C language. A buffer overflow vulnerability exists in the skipcomment file in psaux/psobjs.c in versions of FreeType prior to 2.6.1. The vulnerability stems from a networked system or product performing operations in memory without...

CVE-2019-4236

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...

CVE-2019-4236: Undefined Security Weakness

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...

Denial Of Service (DoS)

GStreamer is vulnerable to denial of service DoS attacks. A remote attacker can cause a system crash via a crafted series of skip and count pairs...

DEBIAN-CVE-2019-7701

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js...

UBUNTU-CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

PT-2019-18074

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description A heap-based buffer over-read issue exists in the Sass::Prelexer::skip over scopes function, located in prelexer.hpp, which is called from Sass::Parser::parse import. This issue is similar to a previously...

Libmad Buffer Overflow DoS

The vulnerability of the madbitskip function in bit.c of the MPEG audio decoder Libmad is related to an error that causes buffer overflows when processing a specially crafted audio file. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...

Authentication flaw

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

Qualcomm Storage Services Data Compromise

The vulnerability of the Qualcomm Storage Services component in the Android operating system is related to the “SKIPSECBOOTCHECKNOTRECOMMENDEDBYQUALCOMM” flag being enabled in the standard configuration of BOOT.BF.3.0. Exploiting this vulnerability allows a remote attacker to compromise the...

CollabNet Plugin globally and unconditionally disables SSL/TLS certificate validation

CollabNet Plugin disabled SSL/TLS certificate validation for the entire Jenkins controller JVM by default. CollabNet Plugin 2.0.5 and newer no longer does that. It instead requires users to opt in to disabling SSL/TLS certificate validation by setting the system property...

DEBIAN-CVE-2018-11693

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skipoverscopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

PT-2018-10753

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description An issue was discovered in the function Sass::Prelexer::skip over scopes, which could allow an attacker to disclose information or cause a denial of service due to an out-of-bounds read of a memory...

Artifex Software MuPDF Denial of Service Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in the 'fzskipspace' function in the pdf/pdf-xref.c file in Artifex Software MuPDF version 1.13.0. A remote attacker can exploit this vulnerability to cause a denial of service wit...

PT-2018-9803

Name of the Vulnerable Software and Affected Versions: MuPDF version 1.13.0 Description: The issue is related to an infinite loop in the fz skip space function of the pdf/pdf-xref.c file. This could allow a remote adversary to cause a denial of service via a crafted pdf file. Recommendations: For...

CVE-2018-7750

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as...