CVE-2014-4482

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

CVE-2014-4054

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

CVE-2014-2944

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

jasper: out-of-bounds read in jpc_pi_nextcprl()

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec

The jpcirct and jpciict functions in jpcmct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service assertion failure...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to cause service interruptions.

The vulnerability of the JPEG 2000 stream processing service for programs used to view and edit PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause...

The vulnerabilities in programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to breach the confidentiality of information.

The vulnerability of JPEG 2000 analyzer programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a...

CVE-2017-0202

creationtimestamp| type| source ---|---|--- 2017-04-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41941...

CVE-2017-3032

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

The vulnerability of the Cisco NX-OS network operating system, which runs on Cisco Nexus 9000 Series switches, allows a malicious actor to initiate unauthorized processes on the system.

The vulnerability of the Telnet function in the Cisco NX-OS network operating system, which is used in Cisco Nexus 9000 Series switches, arises from operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to initiate unauthorized system access,...

CVE-2017-2688

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a...

Siemens RUGGEDCOM ROX I Cross-Site Scripting Vulnerability (CNVD-2017-03649)

Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to conduct cross-site...

Siemens RUGGEDCOM ROX I Security Bypass Vulnerability

Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. A security bypass vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to bypass the access restriction...

Cisco Nexus 9000 Series Switches NX-OS Software Denial of Service Vulnerability

Cisco Nexus 9000 Series Switches are 9000 series switches from Cisco, USA. A denial of service vulnerability exists in the remote login feature of the Cisco NX-OS Software in Cisco Nexus 9000 Series Switches. A remote attacker could exploit the vulnerability by sending a special request to...

CVE-2017-3875

An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list ACL on the affected system. More...

Unspecified Remote Code Execution Vulnerability in Multiple HP Products

HP StoreVirtual 4000 Storage and StoreVirtual VSA are both Hewlett-Packard HP storage appliances for virtualized environments.StoreVirtual 4000 Storage is a horizontally scalable storage platform based on the LeftHand operating system.StoreVirtual VSA is a set of software-defined virtual storage...

Alaris 8000/8015 PC units information disclosure vulnerability

The Alaris 8000 and 8015 PC units are both at the heart of the Alaris system from BD USA, providing a common user interface for programming IV infusions. An information disclosure vulnerability exists in the Alaris 8000 and 8015 PC units. An attacker could exploit the vulnerability to obtain...

bv.ac-poitiers.fr XSS vulnerability

Vulnerable URL: https://bv.ac-poitiers.fr/plavac/plvac/informationplvac.php?netab=' Details: Description| Value ---|--- Patched:| Yes, at 15.02.2017 Latest check for patch:| 15.02.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...