1504 matches found
CVE-2012-4527
Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...
CVE-2012-4510
cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...
Cisco Nexus 1000V protection bypass
Under some conditions devices with invalid licenses and disabled protection do not display valid status...
CVE-2012-2803
Double free vulnerability in the mpegdecodeframe function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value...
File Level Restore Stuck
File level restore stuck in stopping or starting state...
Level3 Outage Causing Major Internet Issues
UPDATED–There were widespread Internet outages and slowdowns on Monday after backbone provider Level3 Communications had a major outage, affecting some downstream providers and enterprises. The company says that the problem stemmed from a software issue with some of its routers. A source with...
"Object reference not set to an instance of an object" error while opening nworks UI
Error "Object reference not set to an instance of an object" occurs when opening nworks UI...
Profile picture thumbnail generation can consume unlimited amount of memory
Discovered a Studio customer, you can upload a very large profile picture to expose the same problem as CONF-21480, just in a different area of the application. We should limit the size of images we're willing to load into memory to avoid this problem with user pictures...
OS X 10.6.5 kernel crash upon wlan roaming with disabled mandatory MCS
During the buildup at the CCC 27c3 congress in Berlin we noticed several Apple Macbooks kernel paniced while connected to the wireless network. We identified the cause of this issue and we are able to reproduce this as well. It seems to be limited to the aluminum unibody Macbooks, running OS X...
AVG Internet Security 2011 Safe Search for IE DoS
Exploit for windows platform in category dos / poc ================================================= AVG Internet Security 2011 Safe Search for IE DoS ================================================= param NAME="URL"...
Unexpected changes in tab focus can be used to run programs from the Internet
Tabs may be used to obscure a download dialog that is visible in another tab. The dialog will allow the user to choose to run downloaded executables directly. If the tab is closed or hidden at the moment that a user was about to click, they can end up clicking on the buttons in the dialog, causin...
cmus symbolic links vulnerability
Insecure creation of /tmp/cmus-status file...
CVE-2009-2958
The tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a TFTP read aka RRQ request with a malformed blksize option...
Adress bar is not always updated correctly when collapsed
The collapsed Address bar can in some cases temporarily show the previous domain instead of the domain of the present site...
CVE-2009-1721
The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...
CVE-2009-1378
Multiple memory leaks in the dtls1processoutofseqmessage function in ssl/d1both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service memory consumption via DTLS records that 1 are duplicates or 2 have sequence numbers much greater than current sequenc...
Sun Identity Manager shell characters vulnerability
Shell characteres vulnerability via password...
Avahi multicast DNS server DoS
assert on UDP packet with SRC port 0...
History Search can be used to execute arbitrary code
When certain parameters are passed to Opera's History Search, they can cause content not to be correctly sanitized. This can allow scripts to be injected into the History Search results page. Such scripts can then run with elevated privileges and interact with Opera's configuration, allowing them...