|
267481
|
8.8 |
HIGH
Network
|
uclouvain
|
openjpeg
|
An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.
|
-
|
CVE-2016-9581
|
2024-11-21 12:01 |
2018-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267482
|
8.1 |
HIGH
Network
|
uclouvain
redhat
debian
|
openjpeg
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
debian_linux
|
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, pote…
|
-
|
CVE-2016-9573
|
2024-11-21 12:01 |
2018-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267483
|
7.5 |
HIGH
Network
|
canonical
xmlsoft
debian
hp
opensuse
|
ubuntu_linux
libxml2
debian_linux
icewall_file_manager
icewall_federation_agent
leap
|
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service att…
|
-
|
CVE-2016-9597
|
2024-11-21 12:01 |
2018-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267484
|
9.9 |
CRITICAL
Network
|
qemu
redhat
citrix
debian
|
qemu
enterprise_linux_desktop
xenserver
enterprise_linux_workstation
openstack
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
|
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9603
|
2024-11-21 12:01 |
2018-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267485
|
7.5 |
HIGH
Network
|
spice_project
redhat
debian
|
spice
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
|
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to …
|
CWE-20
Improper Input Validation
|
CVE-2016-9578
|
2024-11-21 12:01 |
2018-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267486
|
8.8 |
HIGH
Network
|
spice_project
redhat
debian
|
spice
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
|
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9577
|
2024-11-21 12:01 |
2018-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267487
|
5.5 |
MEDIUM
Local
|
theforeman
redhat
|
katello
satellite
satellite_capsule
|
A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them…
|
CWE-59
Link Following
|
CVE-2016-9595
|
2024-11-21 12:01 |
2018-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267488
|
5.9 |
MEDIUM
Network
|
mozilla
|
network_security_services
|
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
|
CWE-384
Session Fixation
|
CVE-2016-9574
|
2024-11-21 12:01 |
2018-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267489
|
6.1 |
MEDIUM
Network
|
accellion
|
ftp_server
|
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable …
|
CWE-79
Cross-site Scripting
|
CVE-2016-9500
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267490
|
5.3 |
MEDIUM
Network
|
accellion
|
ftp_server
|
Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts a…
|
CWE-200
Information Exposure
|
CVE-2016-9499
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
