Lucene search
+L

10506 matches found

myhack58
myhack58
added 2017/03/23 12:00 a.m.73 views

The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net

Overview Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does...

7.5CVSS9.6AI score0.01889EPSS
SaveExploits1
myhack58
myhack58
added 2017/03/22 12:00 a.m.64 views

The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net

Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does not produ...

7.5CVSS9.6AI score0.01889EPSS
SaveExploits1
OSV
OSV
added 2017/03/15 3:59 p.m.49 views

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS7.2AI score
SaveExploits0References8
OSV
OSV
added 2017/03/15 3:59 p.m.7 views

ALPINE-CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS7.3AI score0.10687EPSS
SaveExploits0References1
NVD
NVD
added 2017/03/15 3:59 p.m.22 views

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS8.7AI score0.10687EPSS
SaveExploits0References8
Prion
Prion
added 2017/03/15 3:59 p.m.25 views

Integer overflow

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

7.5CVSS7.3AI score0.10687EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2017/03/15 3:59 p.m.5 views

DEBIAN-CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS9.5AI score0.10687EPSS
SaveExploits0References1
CVE
CVE
added 2017/03/15 3:00 p.m.310 views

CVE-2016-10166

CVE-2016-10166 affects libgd (GD Graphics Library). The vulnerability is an integer underflow in _gdContributionsAlloc in gd_interpolation.c, exploited via inputs that decrement the u variable, and affects libgd up to versions before 2.2.4. Public advisories describe potential impact including de...

9.8CVSS8.5AI score0.10687EPSS
SaveExploits0References8Affected Software1
AlpineLinux
AlpineLinux
added 2017/03/15 3:00 p.m.61 views

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS8.8AI score0.10687EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/03/15 3:00 p.m.45 views

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

8.6AI score0.10687EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2017/03/15 3:00 p.m.61 views

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS9.7AI score0.10687EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2017/03/15 12:20 p.m.10 views

flash-plugin: multiple code execution issues fixed in APSB17-07

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution...

9.3CVSS7.9AI score0.07404EPSS
SaveExploits0References5
Prion
Prion
added 2017/03/14 4:59 p.m.29 views

Buffer overflow

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution...

9.3CVSS8.9AI score0.07404EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2017/03/14 12:00 a.m.10 views

Fedora 24 : tor (2017-5b32a5782b)

Security update for integer underflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/03/14 12:00 a.m.27 views

Fedora 25 : tor (2017-6f3ea63acc)

Security fix for integer underflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

5.5AI score
SaveExploits0References1
Hacker One
Hacker One
added 2017/03/10 11:48 a.m.55 views

Ruby: sprintf combined format string attack

In a ticket that was also reported to "shopify-scripts" regarding "MRuby", I reported in details a combined attack against the sprintf gem: Information leak Heap buffer underflow The full ticket details can be found in: Ticket 212239 The ticked was opened several minutes ago but I add it in case ...

6.4CVSS8.1AI score0.09718EPSS
SaveExploits1
Hacker One
Hacker One
added 2017/03/10 11:35 a.m.41 views

shopify-scripts: sprintf gem - format string combined attack

In the sprintf gem, NOT included in mruby-engine, there are severe vulnerabilities, including information leak, and heap buffer overflow. Here are the technical details. Technical Error 1: ============== The CHECKl macro can sometimes receive negative values, that will bypass the size checks, sin...

7.3AI score
SaveExploits0
OSV
OSV
added 2017/03/10 2:59 a.m.8 views

DEBIAN-CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

7.1CVSS7.6AI score0.01935EPSS
SaveExploits1References1
NVD
NVD
added 2017/03/10 2:59 a.m.21 views

CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

7.1CVSS6.7AI score0.01935EPSS
SaveExploits1References9
OSV
OSV
added 2017/03/10 2:59 a.m.40 views

CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

7.1CVSS6.3AI score
SaveExploits0References9
Rows per page
Query Builder