4298 matches found
Code injection
PCRE before 8.38 mishandles the : and \ substrings in character classes, which allows remote attackers to cause a denial of service uninitialized memory read or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...
CVE-2015-8390
PCRE before 8.38 mishandles the : and \ substrings in character classes, which allows remote attackers to cause a denial of service uninitialized memory read or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by...
PT-2015-7791 · Php Community +2 · Pcre +2
Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.38 Description: The issue concerns how PCRE handles the : and substrings in character classes. This mishandling allows remote attackers to cause a denial of service due to an uninitialized memory read or possibly have...
Microsoft Office Excel Binary Worksheet Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
openSUSE Security Update : haproxy (openSUSE-2015-682)
haproxy was updated to fix two security issues. These security issues were fixed : - CVE-2015-3281: The bufferslowrealign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information uninitialized memo...
Security update for haproxy (important)
haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: The bufferslowrealign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information uninitialized memor...
USN-2770-1 oxide-qt vulnerabilities
It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...
USN-2770-1: Oxide vulnerabilities
It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...
CVE-2015-7802
gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service uninitialized memory read via a crafted GIF file...
Moderate: Red Hat Security Advisory: qemu-kvm security update
Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...
Mozilla Thunderbird < 38.1 Multiple Vulnerabilities (Logjam)
Binary data 8879.prm...
Adobe Flash AVSegmentedSource setSubscribedTags Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Apple iOS Memory Uninitialization Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An uninitialized issue in the Apple iOS kernel allows malicious applications to exploit a vulnerability to obtain sensitive kernel memory information...
libcacard, qemu security update
CentOS Errata and Security Advisory CESA-2015:1793 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, whic...
Debian DSA-3360-1 : icu - security update
It was discovered that the International Components for Unicode ICU library mishandles converter names starting with x-, which allows remote attackers to cause a denial of service read of uninitialized memory or possibly have unspecified other impact via a crafted file. %NASLMINLEVEL 70300 C...
Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150915)
An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory. CVE-2015-5165 After installing thi...
[SECURITY] [DSA 3360-1] icu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3360-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS September 15, 2015 https://www.debian.org/security/faq -...
Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)
An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...
