Archive
October 2016
Vulnerabilities first published in this month (UTC), newest first.
688 results · Feed
-
Unscored —
A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through…
-
Unscored —
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media fi…
-
Unscored —
On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the c…
-
Unscored —
DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of the password-reset UR…
-
Unscored —
On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP mes…
-
Unscored —
On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely trigger…
-
Unscored —
On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages re…
-
Unscored —
Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, …
-
Unscored —
Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows re…
-
Unscored —
The thumbnail shell extension plugin (FoxitThumbnailHndlr_x86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows…
-
Unscored —
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows re…
-
Unscored —
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerabi…
-
Unscored —
Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, …
-
Unscored —
Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.
-
Unscored —
NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someo…
-
Unscored —
Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Some…
-
Unscored —
NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someo…
-
Unscored —
There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].da…
-
Unscored —
There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data …
-
Unscored —
Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.
-
Unscored —
A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af68…
-
Unscored —
A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df8…
-
Unscored —
An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 50…
-
Unscored —
Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.…
-
Unscored —
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vect…
-
Unscored —
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, r…
-
Unscored —
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, r…
-
Unscored —
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via …
-
High 8.8
An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6…
-
High 8.1
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A cr…
-
High 8.8
An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus …
-
High 7.5
Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injecti…
-
Unscored —
In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms…
-
Unscored —
Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers…
-
Unscored —
In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which cou…
-
Unscored —
Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to …
-
Unscored —
A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before …
-
Unscored —
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images…
-
Unscored —
Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components wi…