opensuse project leap 42.1 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag....

Opensuse Leap 42.2 Opensuse Project Leap 42.1 W3m Project W3m1 Github repository available

7.5

CVSSv3

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash)....

Tcpdump Tcpdump Opensuse Project Leap 42.1 Opensuse Leap 42.2

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi....

Icinga Icinga Opensuse Leap 42.2 Opensuse Project Leap 42.1

2.7

CVSSv3

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check....

Opensuse Leap 42.1 Opensuse Leap 42.2 Postfixadmin Project Postfixadmin1 Metasploit module available

5.5

CVSSv3

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file....

Imagemagick Imagemagick Opensuse Leap 42.2 Opensuse Project Leap 42.1

6.5

CVSSv3

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags....

Opensuse Project Leap 42.1 Opensuse Leap 42.2 W3m Project W3m1 Github repository available

9.8

CVSSv3

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which...

Putty Putty Opensuse Project Leap 42.1 Opensuse Leap 42.21 EDB exploit available1 Github repository available

7.5

CVSSv3

The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes"....

Opensuse Leap 42.1 Opensuse Leap 42.2 Opensuse Opensuse 13.2 Encfs Project Encfs

9.8

CVSSv3

Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow....

Opensuse Opensuse 13.2 Opensuse Leap 42.1 Jq Project Jq2 Github repositories available

5.5

CVSSv3

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames....

Imagemagick Imagemagick Opensuse Project Leap 42.1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook