cve details

Imagemagick PCX parser local memory destruction Vulnerability (CVE-2014-8355) Release date:Updated on: Affected Systems:ImageMagick 6.8.9-9Description:Bugtraq id: 70839CVE (CAN) ID: CVE-2014-8355 ImageMagick is an open-source image viewing and editing tool on Unix/Linux platforms. The PCX parser of Imagemagick 6.8.9-9 has a security vulnerability. Attackers can exploit this vulnerability to cause DoS at

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8548) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70888CVE (CAN) ID: CVE-2014-8548 FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video. Libav is a cross-platform free software that allows you to perform video, tra

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8541) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70877CVE (CAN) ID: CVE-2014-8541 FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video. Libav is a cross-platform free software that allows you to perform video, tra

new Bash process, say_hello is a function in the new environment. Its evolution process is as follows: 1. When the new bash is started, the environment variable say_hello is scanned with parentheses and braces, which are determined to be a function definition. 2. bash uses say_hello as the function name and its value as the function body. The typeset command can list all variables and function definitions in the current environment. Let's use typeset to see how this string becomes a function. C

Apache POI Denial of Service Vulnerability (CVE-2014-3574) Released on: 2014-09-03Updated on: Affected Systems:Apache Group POI 3.11.xApache Group POI 3.10.xDescription:Bugtraq id: 69648CVE (CAN) ID: CVE-2014-3574 Apache POI is an open-source cross-platform Java API written in Java. It can read and write Microsoft Office files. Apache POI versions earlier than 3.10.1 and earlier than 3.11-beta2 have the

Bugzilla XSS Vulnerability (CVE-2014-1573) Release date: 2014-10-09Updated on: 2014-10-09 Affected Systems:Bugzilla 4.5.1-4.5.5Bugzilla 4.3.1-4.4.5Bugzilla 4.1.1-4.2.10Bugzilla 2.17.1-4.0.14Unaffected system:Bugzilla 4.5.6Bugzilla 4.4.6Bugzilla 4.2.11Bugzilla 4.0.15Description:CVE (CAN) ID: CVE-2014-1573 Bugzilla is an open-source defect tracking system that manages the entire lifecycle of defects in softwa

Bugzilla unauthorized account Creation Vulnerability (CVE-2014-1572) Release date: 2014-10-09Updated on: 2014-10-09 Affected Systems:Bugzilla 4.5.1-4.5.5Bugzilla 4.3.1-4.4.5Bugzilla 4.1.1-4.2.10Bugzilla 2.23.3-4.0.14Unaffected system:Bugzilla 4.5.6Bugzilla 4.4.6Bugzilla 4.2.11Bugzilla 4.0.15Description:CVE (CAN) ID: CVE-2014-1572 Bugzilla is an open-source defect tracking system that manages the entire life

Apache Qpid Security Restriction Bypass Vulnerability (CVE-2015-0223) Release date:Updated on: Affected Systems:Apache Group Qpid Description:Bugtraq id: 72319CVE (CAN) ID: CVE-2015-0223 Apache Qpid (Open Source AMQP Messaging) is a cross-platform enterprise communication solution that implements the Advanced Message Queue Protocol. Apache Qpid versions earlier than qpidd 0.31 have security vulnerabilit

Wireshark Netflow parser Denial of Service Vulnerability (CVE-2014-6424) Release date:Updated on: Affected Systems:Wireshark 1.12.0Description:Bugtraq id: 69862CVE (CAN) ID: CVE-2014-6424 Wireshark is the most popular network protocol parser. Wireshark 1.12.0 has a denial of service vulnerability. Attackers can exploit this vulnerability to crash affected applications. *> Suggestion:Vendor patch: Wir

Php dns txt record Processing Heap Buffer Overflow Vulnerability (CVE-2014-3597) Release date:Updated on: Affected Systems:PHPUnaffected system:PHP 5.xDescription:--------------------------------------------------------------------------------Bugtraq id: 69322CVE (CAN) ID: CVE-2014-3597 PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML. PHP

Apache OpenOffice Calc Command Injection Vulnerability (CVE-2014-3524) Release date:Updated on: Affected Systems:OpenOfficeUnaffected system:OpenOffice Description:--------------------------------------------------------------------------------Bugtraq id: 69351CVE (CAN) ID: CVE-2014-3524OpenOffice was originally Sun's commercial Office software-StarOffice. After Sun's public code, it was officially named Op

Analysis of privilege escalation vulnerability using F5 ICall script (CVE-2015-3628) Earlier this year, GDS found a vulnerability in F5 BIG-IP LTM that allows restricted users to access the system for extraction and remote command execution after successful Elevation of Privilege.This article will show you how to manually exploit this vulnerability. Metasploit has also added corresponding modules. For details