2847 matches found
CVE-2017-1002151
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...
Tcpdump OSPFv3 Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.OSPFv3 parser is one of the open shortest path first protocol parsers....
UBUNTU-CVE-2017-13036
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...
Pragyan CMS SQL Injection Vulnerability (CNVD-2017-32462)
Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...
Liblouis Denial of Service Vulnerability (CNVD-2017-28739)
Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. A security vulnerability exists in the 'lougetALine' function in compileTranslationTable.c:346 in Liblouis version 3.2.0. A remote attacker can exploit this vulnerability to cause...
Liblouis Read Across Boundaries Vulnerability
Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. An out-of-bounds read vulnerability exists in the 'lougetALine' function of compileTranslationTable.c:343 in Liblouis version 3.2.0. A remote attacker could exploit this...
Reflected Cross-Site Scripting Vulnerability in S-CMS V3.0 build20170808 /admin/demo.asp Page
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in the /admin/demo.asp page in S-CMS V3.0 build20170808. This vulnerability allows an attacker to construct XSS statements and perform pop-up box...
CloudBees Jenkins Git Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed tasks . Git Plugin is one of the plug-ins used to manage the...
Youngzsoft CCFile Denial of Service Vulnerability
Youngzsoft CCFile aka CC File Transfer is a file transfer program. The program is capable of transferring files via Internet and LAN. A security vulnerability exists in Youngzsoft CCFile version 3.6. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to...
CVE-2017-12784
In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...
UBUNTU-CVE-2017-12862
In modules/imgcodecs/src/grfmtpxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...
CVE-2017-10079
Vulnerability in the Oracle Hospitality Suites Management component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...
DEBIAN-CVE-2017-12602
OpenCV Open Source Computer Vision Library through 3.3 has a denial of service memory consumption issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case...
OpenCV Denial of Service Vulnerability (CNVD-2017-24176)
OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service memory consumption...
OpenCV Denial of Service Vulnerability
OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'FillColorRow4' function in the utils.cpp file in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds...
CVE-2017-2285
Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-7812
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...