Skip to content
OpenAdvisories

Archive

9 December 2014

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote atta…

  • Unscored —

    The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a den…

  • Unscored —

    The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial o…

  • Unscored —

    Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote atta…

  • Unscored —

    Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows rem…

  • Unscored —

    The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cau…

  • Unscored —

    Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary fil…

  • Unscored —

    Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows …

  • Unscored —

    The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allo…

  • Unscored —

    The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4…

  • Unscored —

    engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of s…

  • Unscored —

    The ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x befo…

  • Unscored —

    common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/copy_field.php in MantisBT before 1.2.18 allows remote attackers to i…

  • Unscored —

    UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute…

  • Unscored —

    UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated …

  • Unscored —

    The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allow…