4744 matches found
UBUNTU-CVE-2017-13021
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...
kamailio Privilege Acquisition Vulnerability
kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A security vulnerability exists in kamailio versions prior to 4.3.0. An attacker can exploit this vulnerability to gain privileges...
Ansible chroot, jail and zone connection plugin backlink vulnerability
Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. chroot, jail, and zone connection are among the plug-ins. chroot is a root directory modification plug-in; jail is a process or application restriction plug-in; and zone...
libzip '_zip_read_eocd64' function denial of service vulnerability
libzip is a C library for reading, creating and modifying zip archives developed by software developers Dieter Baron and Thomas Klausner. A security vulnerability exists in the 'zipreadeocd64' function of the zipopen.c file in versions of libzip prior to 1.3.0. A remote attacker can exploit this...
pngcrush double release vulnerability
pngcrush is a set of PNG image compression tools. The tool supports batch compression of images in PNG format. A double release vulnerability exists in the png.c file and sPLT chunk structure in versions of pngcrush prior to 1.7.87. No detailed vulnerability details are provided at this time...
mpg123 'INT123_parse_new_id3' function integer overflow vulnerability
mpg123 on 32-bit platforms is a MPEG audio player and decoding library for 32-bit operating systems developed by software developer Michael Hipp.ID3 parser is one of the ID3 parsers. An integer overflow vulnerability exists in the 'INT123parsenewid3' function of the ID3 parser in versions of mpg1...
PT-2017-5755 · Joomla · Googlemaps Plugin
Name of the Vulnerable Software and Affected Versions: Googlemaps plugin versions prior to 3.1 for Joomla! Description: The issue is related to a cross-site scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading t...
CVE-2017-12077
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...
CVE-2017-9555
Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter...
UBUNTU-CVE-2017-12791
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID...
Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-222740)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker could use this vulnerability to bypass security restrictions and perform unauthorized...
DEBIAN-CVE-2017-12959
There is a reachable assertion abort in the function dictaddmrset in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2017-22795)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker could exploit this vulnerability to cause a denial of service crash...
Mozilla Firefox suffers from a misreference vulnerability (CNVD-2017-22794)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. WebSockets is one of the functionality to support the browser to communicate with the server module. A memory misreference vulnerability exists in WebSockets in versions of Mozilla Firefox prior to 55. A...
Telescope Cross-Site Scripting Vulnerability
Telescope is an open source, free platform for building social networking applications. A cross-site scripting vulnerability exists in versions of Telescope prior to 0.9.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2012-2771
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781...
UBUNTU-CVE-2012-2781
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780...