various vulnerabilities and exploits

(subscribe to this query)

bdf/bdflib.c in FreeType prior to 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote malicious users to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Freetype Freetype Debian Debian Linux 7.0 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Hpc Node 6.0

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an malicious user to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Apache Traffic Server Debian Debian Linux 10.0 Debian Debian Linux 11.0

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an malicious user to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Apache Traffic Server Debian Debian Linux 10.0 Debian Debian Linux 11.0

Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an malicious user to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Apache Traffic Server Debian Debian Linux 10.0 Debian Debian Linux 11.0

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

Apache Traffic Server Debian Debian Linux 10.0 Debian Debian Linux 11.0

A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an malicious user to execute arbitrary code.

Lexmark Cxtpc Firmware Lexmark Cstpc Firmware Lexmark Mxtct Firmware Lexmark Mxtpm Firmware Lexmark Cxtmm Firmware Lexmark Mslsg Firmware Lexmark Mxlsg Firmware Lexmark Mslbd Firmware Lexmark Mxlbd Firmware Lexmark Msngm Firmware Lexmark Mstgm Firmware Lexmark Mxngm Firmware

A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an malicious user to execute arbitrary code.

Lexmark Cxtpc Firmware Lexmark Cstpc Firmware Lexmark Mxtct Firmware Lexmark Xs955 -Lexmark Xs950 -Lexmark X954 -Lexmark X952 -Lexmark X950 -Lexmark Mxtpm Firmware Lexmark Cxtmm Firmware Lexmark Mslsg Firmware Lexmark Mxlsg Firmware

A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an malicious user to execute arbitrary code.

Lexmark Cxtpc Firmware Lexmark Cstpc Firmware Lexmark Mxtct Firmware Lexmark Mxtpm Firmware Lexmark Cxtmm Firmware Lexmark Mslsg Firmware Lexmark Mxlsg Firmware Lexmark Mslbd Firmware Lexmark Mxlbd Firmware Lexmark Msngm Firmware Lexmark Cs317 -Lexmark Cs310 -

The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an malicious user to execute arbitrary code.

Lexmark Cxtpc Firmware Lexmark Cstpc Firmware Lexmark Mxtct Firmware Lexmark Mxtpm Firmware Lexmark Cxtmm Firmware Lexmark Mslsg Firmware Lexmark Mxlsg Firmware Lexmark Mslbd Firmware Lexmark Mxlbd Firmware Lexmark Msngm Firmware Lexmark Mstgm Firmware Lexmark Mxngm Firmware

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType prior to 2.5.3 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

Freetype Freetype Freetype Freetype 1.3.1 Freetype Freetype 2.0.0 Freetype Freetype 2.0.1 Freetype Freetype 2.0.2 Freetype Freetype 2.0.3 Freetype Freetype 2.0.4 Freetype Freetype 2.0.5 Freetype Freetype 2.0.6 Freetype Freetype 2.0.7 Freetype Freetype 2.0.8 Freetype Freetype 2.0.9

« PREV 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook