CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

Bumble: Compromising the user ID

Vulnerability allows to compromise the user ID in the "Dating" menu. This is a serious vulnerability that violates the logic of the site and allows the attacker to write a message to the user he likes before the user responds reciprocally. In order to play the vulnerability, you need to go to the...

Flexense HTTP Server Denial Of Service

This module triggers a Denial of Service vulnerability in the Flexense HTTP server. Vulnerability caused by a user mode write access memory violation and can be triggered with rapidly sending variety of HTTP requests with long HTTP header values. Multiple Flexense applications that are using...

CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11224

CVE-2018-11224 affects Libav 12.3. The issue is a read access violation in the in_table_init16 function of libavcodec/aacsbr.c, enabling a remote attacker to cause a denial of service (application crash) as demonstrated by avconv. The connected documents provide identical vulnerability descriptio...

Code injection

An issue was discovered in Libav 12.3. A read access violation in the movprobe function in libavformat/mov.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11102

An issue was discovered in Libav 12.3. A read access violation in the movprobe function in libavformat/mov.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

Valve: Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation

A malformed .TGA when loaded as a Skybox on a map in a GoldSRC engine game Half-Life can lead to arbitrary code execution on a remote client. Reproduction Steps Load the attached map + resources on a local Half-Life listen server. The game will crash with an Access Violation as soon as the map wi...

Valve: Malformed .BSP Access Violation in CS:GO can lead to Remote Code Execution

A malformed .BSP can trigger an Access Violation on CS:GO that can lead to arbitrary code execution on a remote computer. I have attached a copy of the malformed .BSP which reliably triggers an Access Violation on CS:GO. Impact An attacker hosting a malicious server could compromise a remote clie...

CVE-2018-10774

Read access violation in the isiinkeyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by isi2xml...

Design/Logic Flaw

Read access violation in the isiinkeyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by isi2xml...

CVE-2018-10778

Read access violation in the IIIdequantizesample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409...

UBUNTU-CVE-2018-10774

Read access violation in the isiinkeyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by isi2xml...

DEBIAN-CVE-2018-10778

Read access violation in the IIIdequantizesample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409...

CVE-2018-10778

Read access violation in the IIIdequantizesample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409...

DEBIAN-CVE-2018-10774

Read access violation in the isiinkeyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by isi2xml...

CVE-2018-10778

CVE-2018-10778 describes a read access violation in III_dequantize_sample (mpglibDBL/layer3.c) used by MP3Gain up to version 1.5.2-r2. The vulnerability allows a remote attacker to cause a denial of service (application crash) and possibly other impact. The provided connected documents confirm th...

CVE-2018-10774

Read access violation in the isiinkeyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service application crash, as demonstrated by isi2xml...