PT-2020-8033 · Openjpeg +1 · Openjpeg +1

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.1.1 Description: The issue allows attackers to cause a denial of service, specifically memory corruption, by using a crafted jpeg 2000 file. This is due to a problem in the color esycc to rgb function...

Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors

The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...

Vulnerability of Cisco Nexus 5000 software, allowing attackers to access confidential information

The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...

Vulnerability of Cisco Nexus 7000 software, allowing attackers to access confidential information

The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other undefined actions...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment. This is achieved by usi...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment, by using SSH sessions a...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to execute arbitrary code.

The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that this...

OpenJPEG 'color_esycc_to_rgb' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's coloresycctorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

OpenJPEG 'sycc444_to_rgb_of_color' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc444torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

CVE-2016-4808

creationtimestamp| type| source ---|---|--- 2016-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39821...

BELL-CVE-2016-3672 CVE-2016-3672 does not affect BellSoft software

Bulletin has no description...

Manage Engine Network Configuration Manager Cross-Site Request Forgery Vulnerability

Network Configuration Manager is a web-based, multi-vendor Network Change, Configuration and Compliance Management NCCCM solution for switches, routers, firewalls and other network devices. A cross-site request forgery vulnerability exists in Manage Engine Network Configuration Manager Build 1100...

Thousand (1000) Online HD - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Thousand 1000 Online HD published at the 'play' market has multiple vulnerabilities...

Thousand+ - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Thousand+ published at the 'play' market has multiple vulnerabilities...

Thousand (1000) online - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thousand 1000 online published at the 'play' market has multiple vulnerabilities...

Thousand II+ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thousand II+ published at the 'play' market has multiple vulnerabilities...

mysql: unspecified vulnerability related to Server:DML (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the opjj2kupdateimagedata function j2k.c in the OpenJPEG component, which is used in the Google Chrome browser’s PDFium engine, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to cause a service failure memory spi...

The vulnerability of Cisco ASR 5000 router microprogramming software allows attackers to enhance their privileges.

The vulnerability of the SSH protocol implementation in Cisco ASR 5000 microprogramming software is related to deficiencies in the configuration of multi-user authentication with a public key. Exploiting this vulnerability allows a malicious actor to gain increased privileges by establishing a...

The vulnerability of the Zhuhai RaySharp video surveillance software allows a intruder to gain access to protected information.

The software of the video surveillance device Zhuhai RaySharp has a default root user password. Exploiting this vulnerability allows a malicious actor to gain access to protected information via the TCP port 23 or 9000...