Lucene search
K

3037 matches found

OSV
OSV
added 2017/05/23 12:0 a.m.1 views

UBUNTU-CVE-2017-9214

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

9.8CVSS7.4AI score0.02887EPSS
Exploits0References4
OSV
OSV
added 2017/05/22 5:29 a.m.2 views

CVE-2017-2499

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service memory...

7.8CVSS7.6AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/05/22 5:29 a.m.25 views

CVE-2017-2499

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service memory...

7.8CVSS7.5AI score0.01042EPSS
Exploits0References4
CNVD
CNVD
added 2017/05/22 12:0 a.m.3 views

Google I/O 2017 application for Android has an unspecified vulnerability

Google I/O 2017 application for Android is a conference management application for Google's annual I/O conference based on the Android platform developed by Google USA. A security vulnerability exists in versions of the Google I/O 2017 application for Android-based platforms prior to 5.1.4, due t...

5.9CVSS6.7AI score0.00263EPSS
Exploits1References1
OSV
OSV
added 2017/05/18 1:29 a.m.1 views

DEBIAN-CVE-2017-9043

readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file...

7.8CVSS7.2AI score0.02129EPSS
Exploits0References1
android
android
added 2017/05/01 12:0 a.m.36 views

CVE-2014-9924

In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur...

9.3CVSS8AI score0.0046EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2017/04/12 9:50 a.m.24 views

CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

6.5CVSS6.3AI score0.02229EPSS
Exploits1References1
Prion
Prion
added 2017/04/09 2:59 p.m.15 views

Design/Logic Flaw

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

6.8CVSS8AI score0.01486EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2017/04/09 2:59 p.m.1 views

DEBIAN-CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

7.8CVSS8.1AI score0.01486EPSS
Exploits1References1
NVD
NVD
added 2017/04/09 2:59 p.m.13 views

CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

7.8CVSS8.4AI score0.01486EPSS
Exploits1References4
OSV
OSV
added 2017/04/09 2:59 p.m.2 views

DEBIAN-CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

6.5CVSS7.1AI score0.02229EPSS
Exploits1References1
Cvelist
Cvelist
added 2017/04/09 2:0 p.m.23 views

CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

7.8AI score0.01486EPSS
Exploits1References4
CVE
CVE
added 2017/04/09 2:0 p.m.101 views

CVE-2017-7600

CVE-2017-7600 : A vulnerability in libtiff 4.0.7 and earlier allows a crafted TIFF image to trigger undefined behavior in TIFF handling (e.g., putgreytile/TIFFReadDirEntryCheckedRational), potentially causing a denial of service (application crash). Affected products/version ranges are reported a...

7.8CVSS7.2AI score0.01486EPSS
Exploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2017/04/09 12:0 a.m.19 views

CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

7.8CVSS6.8AI score0.01486EPSS
Exploits1References3
OSV
OSV
added 2017/04/09 12:0 a.m.0 views

UBUNTU-CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

6.5CVSS7AI score0.02229EPSS
Exploits1References5
OSV
OSV
added 2017/04/09 12:0 a.m.1 views

UBUNTU-CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

7.8CVSS7AI score0.01486EPSS
Exploits1References4
CNVD
CNVD
added 2017/03/27 12:0 a.m.2 views

NetIQ Access Manager Information Disclosure Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all Web access needs. The SAML2 implementation of the Identity Server in NetIQ Access Manager fails to properly handle unsigned SAML requests, allowing an attacker to disclose the results to a potentially malicious...

7.5CVSS6.7AI score0.0109EPSS
Exploits0References1
OSV
OSV
added 2017/03/23 6:59 a.m.3 views

CVE-2016-5752

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester...

7.5CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2017/03/23 6:59 a.m.8 views

Design/Logic Flaw

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester...

5CVSS7AI score0.0109EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/03/23 6:59 a.m.10 views

CVE-2016-5752

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester...

7.5CVSS7.5AI score0.0109EPSS
Exploits0References1
Rows per page
Query Builder