various vulnerabilities and exploits

(subscribe to this query)

cff/cf2intrp.c in the CFF CharString interpreter in FreeType prior to 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote malicious users to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted...

Oracle Solaris 10.0 Oracle Solaris 11.2 Freetype Freetype Fedoraproject Fedora 20 Fedoraproject Fedora 21 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04

cff/cf2ft.c in FreeType prior to 2.5.4 does not validate the return values of point-allocation functions, which allows remote malicious users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font.

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Debian Debian Linux 7.0 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Freetype Freetype

The Load_SBit_Png function in sfnt/pngshim.c in FreeType prior to 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote malicious users to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other i...

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.10 Freetype Freetype Opensuse Opensuse 13.1 Opensuse Opensuse 13.2

The woff_open_font function in sfnt/sfobjs.c in FreeType prior to 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote malicious users to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have ...

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Freetype Freetype

Lack of proper input validation and constraint enforcement in Apache Ambari before 2.7.8 Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads. Users are recommended t...

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Procedure, Create Database Lin...

Oracle Database Server 11.2.0.4 Oracle Database Server 12.1.0.2 Oracle Database Server 12.2.0.1 Oracle Database Server 18c Oracle Database Server 19c

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to pr...

Ubuntubudgie Budgie Extras

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file ...

Ubuntubudgie Budgie Extras

The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType prior to 2.5.4 proceeds with adding to length values without validating the original values, which allows remote malicious users to cause a denial of service (integer overflow and heap-based buffer overflow) or poss...

Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.04 Oracle Solaris 10.0 Oracle Solaris 11.2 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Hpc Node 6.0

Directory traversal vulnerability in ELOG prior to 2.6.1 allows remote malicious users to access arbitrary files outside of the elog directory via "../" (dot dot) sequences in the URL.

Stefan Ritt Elog Web Logbook 2.0.0 Stefan Ritt Elog Web Logbook 2.0.1 Stefan Ritt Elog Web Logbook 2.0.2 Stefan Ritt Elog Web Logbook 2.0.3 Stefan Ritt Elog Web Logbook 2.0.4 Stefan Ritt Elog Web Logbook 2.0.5 Stefan Ritt Elog Web Logbook 2.1.0 Stefan Ritt Elog Web Logbook 2.1.1 Stefan Ritt Elog Web Logbook 2.1.2 Stefan Ritt Elog Web Logbook 2.1.3 Stefan Ritt Elog Web Logbook 2.2.0 Stefan Ritt Elog Web Logbook 2.2.1

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook