Skip to content
OpenAdvisories

Archive

7 February 2018

Vulnerabilities first published on this day (UTC), newest first.

61 results · Feed

  • Unscored —

    ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer …

  • Unscored —

    ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted …

  • Unscored —

    Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vec…

  • Unscored —

    Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified im…

  • Unscored —

    ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) v…

  • Unscored —

    ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging mis…

  • Unscored —

    Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have …

  • Unscored —

    CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen whe…

  • Unscored —

    Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption…

  • Unscored —

    Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified i…

  • Unscored —

    Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to ca…

  • Unscored —

    In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon impleme…

  • Unscored —

    In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute …

  • Unscored —

    An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A…

  • Unscored —

    Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Inject…

  • Unscored —

    Marked 2 through 2.5.11 allows remote attackers to read arbitrary files via a crafted HTML document that triggers a red…

  • Unscored —
    CVE-2018-6794 Public exploit EPSS 24%

    Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious s…

  • Unscored —

    The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause…

  • Unscored —
    CVE-2018-6791 Public exploit

    An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thu…

  • Unscored —

    An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows…

  • Unscored —

    Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL co…