3590 matches found
CVE-2017-8710
The Microsoft Common Console Document .msc in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbitrary files via an XML external entity XXE declaration, due to the way that the Microsoft Common Console Document .msc parses XML input containing a reference t...
Microsoft Office Memory Corruption Vulnerability (CNVD-2017-32622)
Microsoft Office 2007 SP3, etc. are office software suite products developed by the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Office, which arises from the program failing to properly handle objects in memory. A remote attacker could exploit this...
CVE-2017-14075
creationtimestamp| type| source ---|---|--- 2017-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42625...
SUSE-SU-2017:2356-1 Security update for postgresql96
This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...
JasPer Denial of Service Vulnerability (CNVD-2017-25685)
JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer, which can be exploited by a remote...
CVE-2017-6995
creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...
CVE-2017-6999
creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555 2026-09-01 20:02:52+00:00| seen| Telegram/TPzMGAFr9pAhG0kkjWcntkaxpJGoF87U7r7jyK8c3zj6Kk8 2026-09-02 01:03:29+00:00| seen|...
NewSouth Innovations Kakadu SDK Buffer Overflow Vulnerability (CNVD-2017-28778)
NewSouth Innovations Kakadu SDK is a JPEG2000 software development kit from NewSouth Innovations, Australia. A buffer overflow vulnerability exists in version 7.9 of the NewSouth Innovations Kakadu SDK, which originates when the program fails to properly perform bounds detection on user-submitted...
CVE-2017-11228
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 JP2 code stream data. Successful exploitation could lead to...
UBUNTU-CVE-2015-5221
Use-after-free vulnerability in the mifprocesscmpt function in libjasper/mif/mifcod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...
CVE-2017-7041
creationtimestamp| type| source ---|---|--- 2017-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42366...
CVE-2017-6729
A vulnerability in the Border Gateway Protocol BGP processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core VPC Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reloa...
Cisco StarOS CLI Local Command Injection Vulnerability
The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to long-term evolution. and StarOS is the suite of Linux operating systems used in them. A security vulnerability in Cisco StarOS and Cisco Virtualized Packet Core VPC Software for handling C...
Cisco ASR 5500 Series Routers Denial of Service Vulnerability
The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability exists in the Cisco ASR 5000 series routers. A remote attacker can cause a denial of service by sending specific TCP packets to the StarOS...
PT-2017-15558 · Poppler +2 · Poppler +2
Name of the Vulnerable Software and Affected Versions: Poppler version 0.53.0 Description: An integer overflow issue exists in the JPEG 2000 image parsing functionality. A specially crafted PDF file can cause an integer overflow, leading to out of bounds memory overwrite on the heap, potentially...
XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-21798)
XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...
CVE-2017-3865
A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service DoS condition. Affected Products: ASR 5000...
CVE-2017-8483
creationtimestamp| type| source ---|---|--- 2017-06-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42243...
Cisco StarOS IPsec Denial of Service Vulnerability
The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to long-term evolution. and StarOS is the suite of Linux operating systems used in them. Cisco StarOS for Cisco ASR 5000 Series Routers has a security vulnerability in the IPsec component...