Archive
23 December 2016
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Unscored —
Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewe…
-
Unscored —
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is execu…
-
Unscored —
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanit…
-
Unscored —
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually…
-
Unscored —
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen b…
-
High 7.5
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. …
-
Unscored —
Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It cou…
-
Unscored —
Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur …
-
High 7.5
An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-…
-
High 7.5
An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.…
-
Unscored —
Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur…
-
Unscored —
Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It …
-
Unscored —
Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. …
-
Unscored —
Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could …
-
Unscored —
The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung…
-
Unscored —
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memor…
-
Unscored —
The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds mem…
-
Unscored —
The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decod…
-
Unscored —
The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of …
-
Unscored —
The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial …
-
Unscored —
The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of …
-
Unscored —
The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding …
-
Unscored —
The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of serv…
-
Unscored —
The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite lo…
-
Unscored —
Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh…
-
Unscored —
The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of s…
-
Unscored —
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, P…
-
Unscored —
Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 …
-
Unscored —
The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a de…