OBS-Vigilance

Title	Description	Date
IBM MQ: denial of service via Slowloris	An attacker can cause a fatal error of IBM MQ, via Slowloris, in order to trigger a denial of service...	Visit link for details
GNU Binutils: out-of-bounds memory reading via vfinfo()	An attacker can force a read at an invalid memory address of GNU Binutils, via vfinfo(), in order to trigger a denial of service, or to obtain sensitive information...	Visit link for details
GNU Binutils: denial of service via tg_tag_type()	An attacker can cause a fatal error of GNU Binutils, via tg_tag_type(), in order to trigger a denial of service...	Visit link for details
libsoup: out-of-bounds memory reading via Cookie Date	An attacker can force a read at an invalid memory address of libsoup, via Cookie Date, in order to trigger a denial of service, or to obtain sensitive information...	Visit link for details
Spring Framework: Cross Site Request Forgery via STOMP Over WebSocket	An attacker can trigger a Cross Site Request Forgery of Spring Framework, via STOMP Over WebSocket, in order to force the victim to perform operations...	Visit link for details
Cisco IP Phone: two vulnerabilities via SIP	An attacker can use several vulnerabilities of Cisco IP Phone, via SIP...	Visit link for details
Snort: denial of service via HTTP Decoder MIME Error	An attacker can cause a fatal error of Snort, via HTTP Decoder MIME Error, in order to trigger a denial of service...	Visit link for details
Snort: out-of-bounds memory reading via HTTP Decoder MIME	An attacker can force a read at an invalid memory address of Snort, via HTTP Decoder MIME, in order to trigger a denial of service, or to obtain sensitive information...	Visit link for details
FFmpeg: integer overflow via WAVARC Decoder	An attacker can trigger an integer overflow of FFmpeg, via WAVARC Decoder, in order to trigger a denial of service, and possibly to run code...	Visit link for details
FFmpeg: integer overflow via parse_options()	An attacker can trigger an integer overflow of FFmpeg, via parse_options(), in order to trigger a denial of service, and possibly to run code...	Visit link for details