Lucene search
+L

3078 matches found

CNVD
CNVD
•added 2017/03/15 12:00 a.m.•8 views

Wireless IP Camera (P2P) WIFICAM Unauthorized Access Vulnerability

Wireless IP Camera P2P WIFICAM is a wireless IP camera. The Wireless IP Camera P2P WIFICAM unauthorized access vulnerability allows an attacker to access the camera's built-in RTSP server on port 10554 and watch live video streams without authentication...

6.9AI score
SaveExploits0References1
Prion
Prion
•added 2017/03/10 10:59 a.m.•21 views

Heap overflow

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

5CVSS7.4AI score0.01419EPSS
SaveExploits0References4Affected Software2
NVD
NVD
•added 2017/03/10 10:59 a.m.•31 views

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS7.5AI score0.01419EPSS
SaveExploits0References4
OSV
OSV
•added 2017/03/10 10:59 a.m.•16 views

DEBIAN-CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS7.7AI score0.01419EPSS
SaveExploits0References1
OSV
OSV
•added 2017/03/10 10:59 a.m.•34 views

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS6.7AI score
SaveExploits0References4
Mend
Mend
•added 2017/03/10 10:29 a.m.•1 views

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

8.7CVSS0.01419EPSS
SaveExploits0References5
CVE
CVE
•added 2017/03/10 10:29 a.m.•117 views

CVE-2017-6802

CVE-2017-6802 applies to libytnef/ytnef (affecting ytnef prior to 1.9.2 and addressed in later releases). The issue is described as a heap-based over-read related to RTF stream decompression (DecompressRTF()) in libytnef, with related vulnerabilities in the same libytnef set (CVE-2017-6298..6306,...

7.5CVSS7.4AI score0.01419EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2017/03/10 12:00 a.m.•37 views

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS7.2AI score0.01419EPSS
SaveExploits0References5
OSV
OSV
•added 2017/03/10 12:00 a.m.•11 views

UBUNTU-CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS7.3AI score0.01419EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/10 12:00 a.m.•6 views

CVE-2017-6802: Out-of-bounds Read

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

7.5CVSS8.4AI score0.01419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/03/08 12:00 a.m.•3 views

PT-2017-17334

Name of the Vulnerable Software and Affected Versions ytnef versions prior to 1.9.2 Description A potential heap-based buffer over-read issue has been discovered in the handling of incoming Compressed RTF Streams. This issue is related to the DecompressRTF function in libytnef. Recommendations Fo...

7.5CVSS0.01419EPSS
SaveExploits0References33
Positive Technologies
Positive Technologies
•added 2017/02/16 12:00 a.m.•3 views

PT-2017-4240

Name of the Vulnerable Software and Affected Versions PHP versions prior to 2017-03-07 Description The issue is related to the misparsing of fsockopen calls in the main/streams/xp socket.c component of PHP. This occurs when the function interprets the address and port in a way that can lead to a...

7.8CVSS0.02425EPSS
SaveExploits0References12
Veracode
Veracode
•added 2017/02/10 1:57 a.m.•20 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. These attacks are possible because the dtls1listen function doesn't correctly isolate the state information of independent data streams...

5CVSS6.7AI score0.06483EPSS
SaveExploits0References18Affected Software1
ThreatPost
ThreatPost
•added 2016/12/23 9:21 a.m.•11 views

Apple Delays App Transport Security Deadline

Apple backtracked on its plan to enforce a year-end deadline that would of required developers to move apps to an HTTPS-only model in an effort to thwart eavesdropping on insecure, plaintext HTTP connections. On Wednesday Apple said a requirement for developers to adopt App Transport Security wou...

6.7AI score
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2016/12/15 12:00 a.m.•40 views

Adobe Digital Editions FlateDecode Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

5.3CVSS1.2AI score0.02298EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
•added 2016/12/14 6:11 p.m.•59 views

Security update for gstreamer-plugins-bad (important)

This update for gstreamer-plugins-bad fixes the following issues: - Maliciously crafted VMnc VMware video streams typically contained in .avi files could cause code execution during decoding or information leaks due to an unitialized buffer CVE-2016-9445, CVE-2016-9446, boo1010829...

2.8AI score0.04843EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/11/15 12:00 a.m.•12 views

p7zip null pointer backreference vulnerability

p7zip is a set of data compression and decompression software for Unix-like systems that is, 7z compression software under Win. A security vulnerability exists in the 'CInArchive::ReadAndDecodePackedStreams' function in the CPP/7zip/Archive/7z/7z/ 7zIn.cpp file in p7zip 16.02 and earlier versions...

7.5CVSS6.7AI score0.07016EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2016/11/15 12:00 a.m.•27 views

Fedora 25 : php (2016-dc5bf39fcf)

15 Sep 2016 PHP version 7.0.11 Core: - Fixed bug php72944 NULL pointer deref in zvaldelrefp. Dmitry - Fixed bug php72943 assigndim on string doesn't reset hval. Laruence - Fixed bug php72911 Memleak in zendbinaryassignopobjhelper. Laruence - Fixed bug php72813 Segfault with get returned by ref...

5.6AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/11/04 12:00 a.m.•49 views

Adobe Reader DC XObject stream Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

10CVSS2.9AI score0.08706EPSS
SaveExploits0References1
OSV
OSV
•added 2016/10/27 9:59 p.m.•16 views

CVE-2016-6439

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

7.5CVSS5.8AI score0.01633EPSS
SaveExploits0References3
Rows per page
Query Builder