| High | Medium | Low | Negligible |
|---|---|---|---|
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2017-5334 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5334 |
| CVE-2015-8271 | Fixed version: 3.3.8-6+deb8u5 The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code. | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8271 |
| CVE-2014-9761 | Fixed version: 2.4+20150115.gita107cef-1+deb8u1 Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2014-9761 |
| CVE-2017-5336 | Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5336 |
| CVE-2017-8287 | Fixed version: 3.3.8-6+deb8u5 FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c. | freetype @ 2.5.2-3+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8287 |
| CVE-2017-5337 | Fixed version: 2.5.2-3+deb8u2 Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5337 |
| CVE-2016-2779 | Fixed version: 3.3.8-6+deb8u5 runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2016-2779 |
| CVE-2017-5461 | Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations. | nss @ 2:3.26-1+debu8u1 | https://security-tracker.debian.org/tracker/CVE-2017-5461 |
| CVE-2017-8105 | Fixed version: 2:3.26-1+debu8u2 FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c. | freetype @ 2.5.2-3+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8105 |
| CVE-2016-7167 | Fixed version: 2.5.2-3+deb8u2 Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-7167 |
| CVE-2016-7942 | The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations. | libx11 @ 2:1.6.2-3 | https://security-tracker.debian.org/tracker/CVE-2016-7942 |
| CVE-2016-7943 | The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations. | libx11 @ 2:1.6.2-3 | https://security-tracker.debian.org/tracker/CVE-2016-7943 |
| CVE-2016-4448 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2016-4448 |
| CVE-2016-9843 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. | zlib @ 1:1.2.8.dfsg-2 | https://security-tracker.debian.org/tracker/CVE-2016-9843 |
| CVE-2016-9841 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | zlib @ 1:1.2.8.dfsg-2 | https://security-tracker.debian.org/tracker/CVE-2016-9841 |
| CVE-2017-3526 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3526 |
| CVE-2017-8804 | Fixed version: 7u131-2.6.9-2~deb8u1 The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2017-8804 |
| CVE-2016-7951 | Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks. | libxtst @ 2:1.2.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7951 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2016-3616 | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file. | libjpeg-turbo @ 1:1.3.1-12 | https://security-tracker.debian.org/tracker/CVE-2016-3616 |
| CVE-2017-5335 | The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5335 |
| CVE-2017-7507 | Fixed version: 3.3.8-6+deb8u5 GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7507 |
| CVE-2011-3389 | Fixed version: 3.3.8-6+deb8u6 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2011-3389 |
| CVE-2017-7869 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7869 |
| CVE-2017-9050 | Fixed version: 3.3.8-6+deb8u5 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-9050 |
| CVE-2017-8872 | The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-8872 |
| CVE-2017-9048 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-9048 |
| CVE-2016-7141 | curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-7141 |
| CVE-2017-7868 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function. | icu @ 52.1-8+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7868 |
| CVE-2017-6512 | Fixed version: 52.1-8+deb8u5 Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic. | perl @ 5.20.2-3+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2017-6512 |
| CVE-2017-9049 | Fixed version: 5.20.2-3+deb8u7 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-9049 |
| CVE-2017-7741 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7741 |
| CVE-2017-9287 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0. | openldap @ 2.4.40+dfsg-1+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-9287 |
| CVE-2016-9840 | Fixed version: 2.4.40+dfsg-1+deb8u3 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | zlib @ 1:1.2.8.dfsg-2 | https://security-tracker.debian.org/tracker/CVE-2016-9840 |
| CVE-2016-7952 | X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data. | libxtst @ 2:1.2.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7952 |
| CVE-2017-3544 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3544 |
| CVE-2017-7244 | Fixed version: 7u131-2.6.9-2~deb8u1 The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7244 |
| CVE-2017-7742 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7742 |
| CVE-2016-3120 | The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-3120 |
| CVE-2017-7585 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7585 |
| CVE-2015-8272 | RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash). | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8272 |
| CVE-2017-9526 | Fixed version: 2.4+20150115.gita107cef-1+deb8u1 In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library. | libgcrypt20 @ 1.6.3-2+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-9526 |
| CVE-2016-7945 | Fixed version: 1.6.3-2+deb8u3 Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields. | libxi @ 2:1.7.4-1 | https://security-tracker.debian.org/tracker/CVE-2016-7945 |
| CVE-2017-7186 | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7186 |
| CVE-2017-8362 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8362 |
| CVE-2017-6508 | CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. | wget @ 1.16-1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-6508 |
| CVE-2017-6519 | Fixed version: 1.16-1+deb8u2 avahi-daemon in Avahi through 0.6.32 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. | avahi @ 0.6.31-5 | https://security-tracker.debian.org/tracker/CVE-2017-6519 |
| CVE-2015-3217 | PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2015-3217 |
| CVE-2016-1024 | The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file. | freetype @ 2.5.2-3+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-10244 |
| CVE-2015-5276 | Fixed version: 2.5.2-3+deb8u2 The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors. | gcc-4.9 @ 4.9.2-10 | https://security-tracker.debian.org/tracker/CVE-2015-5276 |
| CVE-2017-6892 | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-6892 |
| CVE-2015-8270 | The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash). | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8270 |
| CVE-2017-3509 | Fixed version: 2.4+20150115.gita107cef-1+deb8u1 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3509 |
| CVE-2017-8363 | Fixed version: 7u131-2.6.9-2~deb8u1 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8363 |
| CVE-2016-9842 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers. | zlib @ 1:1.2.8.dfsg-2 | https://security-tracker.debian.org/tracker/CVE-2016-9842 |
| CVE-2017-8365 | The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8365 |
| CVE-2017-7867 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function. | icu @ 52.1-8+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7867 |
| CVE-2017-9047 | Fixed version: 52.1-8+deb8u5 A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-9047 |
| CVE-2017-7502 | Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker. | nss @ 2:3.26-1+debu8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7502 |
| CVE-2017-8361 | Fixed version: 2:3.26-1+debu8u2 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-8361 |
| CVE-2016-7946 | X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields. | libxi @ 2:1.7.4-1 | https://security-tracker.debian.org/tracker/CVE-2016-7946 |
| CVE-2015-2694 | The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-2694 |
| CVE-2017-6891 | Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility. | libtasn1-6 @ 4.2-3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-6891 |
| CVE-2016-1022 | Fixed version: 4.2-3+deb8u3 The iconv program in the GNU C Library (aka glibc or libc6) 2.25 and earlier, when invoked with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2016-10228 |
| CVE-2016-9318 | libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2016-9318 |
| CVE-2016-5011 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2016-5011 |
| CVE-2017-7586 | In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7586 |
| CVE-2017-3533 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3533 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2016-7098 | Fixed version: 7u131-2.6.9-2~deb8u1 Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. | wget @ 1.16-1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-7098 |
| CVE-2017-7407 | The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2017-7407 |
| CVE-2016-2781 | chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. | coreutils @ 8.23-4 | https://security-tracker.debian.org/tracker/CVE-2016-2781 |
| CVE-2017-5969 | ** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser." | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5969 |
| CVE-2017-3539 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3539 |
| CVE-2016-9844 | Fixed version: 7u131-2.6.9-2~deb8u1 Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. | unzip @ 6.0-16+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9844 |
| CVE-2016-9401 | Fixed version: 6.0-16+deb8u3 popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. | bash @ 4.3-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-9401 |
| CVE-2016-3119 | The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-3119 |
| CVE-2017-3511 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-3511 |
| CVE-2012-5373 | Fixed version: 7u131-2.6.9-2~deb8u1 Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against the MurmurHash3 algorithm, a different vulnerability than CVE-2012-2739. | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2012-5373 |
| CVE-2014-9913 | Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method. | unzip @ 6.0-16+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2014-9913 |
| CVE-2016-3189 | Fixed version: 6.0-16+deb8u3 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. | bzip2 @ 1.0.6-7 | https://security-tracker.debian.org/tracker/CVE-2016-3189 |
| CVE-2015-5180 | res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash). | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2015-5180 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2010-0928 | OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack." | openssl @ 1.1.0e-1 | https://security-tracker.debian.org/tracker/CVE-2010-0928 |
| CVE-2012-3878 | perl @ 5.20.2-3+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2012-3878 | |
| CVE-2007-6755 | The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE. | openssl @ 1.1.0e-1 | https://security-tracker.debian.org/tracker/CVE-2007-6755 |
| CVE-2017-2616 | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2017-2616 | |
| CVE-2017-7246 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7246 |
| CVE-2011-4116 | perl @ 5.20.2-3+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2011-4116 | |
| CVE-2015-5224 | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2015-5224 | |
| CVE-2012-2739 | Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. | openjdk-7 @ 7u121-2.6.8-2~deb8u1 | https://security-tracker.debian.org/tracker/CVE-2012-2739 |
| CVE-2016-9063 | expat @ 2.1.0-6+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-9063 | |
| CVE-2010-4051 | Fixed version: 2.1.0-6+deb8u4 The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow." | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4051 |
| CVE-2017-8283 | dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD. | dpkg @ 1.17.27 | https://security-tracker.debian.org/tracker/CVE-2017-8283 |
| CVE-2013-0340 | expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. | expat @ 2.1.0-6+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2013-0340 |
| CVE-2013-4235 | shadow @ 1:4.2-3+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2013-4235 | |
| CVE-2016-4484 | The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password. | cryptsetup @ 2:1.6.6-5 | https://security-tracker.debian.org/tracker/CVE-2016-4484 |
| CVE-2007-6755 | The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE. | openssl @ 1.0.1t-1+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2007-6755 |
| CVE-2010-4756 | The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4756 |
| CVE-2015-3276 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | openldap @ 2.4.40+dfsg-1+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-3276 |
| CVE-2015-8985 | The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2015-8985 |
| CVE-2016-3739 | The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-3739 |
| CVE-2010-4052 | Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4052 |
| CVE-2005-2541 | Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges. | tar @ 1.27.1-2+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2005-2541 |
| CVE-2011-3374 | apt @ <IP_ADDRESS>.4 | https://security-tracker.debian.org/tracker/CVE-2011-3374 | |
| CVE-2014-8166 | cups @ 1.7.5-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2014-8166 | |
| CVE-2004-0971 | The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2004-0971 |
| CVE-2010-0928 | OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack." | openssl @ 1.0.1t-1+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2010-0928 |
| CVE-2007-5686 | initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers. | shadow @ 1:4.2-3+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2007-5686 |
| CVE-2013-4392 | systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files. | systemd @ 215-17+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2013-4392 |
| CVE-2017-7245 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7245 |
| CVE-2015-5218 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2015-5218 |
| CVE-2015-5186 | audit @ 1:2.4-1 | https://security-tracker.debian.org/tracker/CVE-2015-5186 | |
| CVE-2012-0039 | ** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application. | glib2.0 @ 2.42.1-1 | https://security-tracker.debian.org/tracker/CVE-2012-0039 |


React Developer
WebPT
GitHub: @nickperez1285
GitHub: @gustavo-yepez
Backend Developer
GitHub: @RyanSWest
User Interface Developer and Designer
WebPT15
GitHub: @ms177


{% macro demographics(value) %}
{{ x|safe }}
{% endif %} {% endfor %}Percentage of all 17- to 19-year-olds in Texas
Percentage of UT-Austin freshmen
Source: Department of State Health Services 2015 population projections and the University of Texas at Austin Automatic Admissions reports.
Scroll


Present ideas and concepts through storyboards, wireframes, or interactive prototypes you can showcase to stakeholders.
Storyboards
- Articulate your concept through a user workflow
- Create a journey map of how your users would engage with your idea
- Validate the desirability of your idea
Wireframes
- Articulate your concept through a user workflow
- Create a journey map of how your users would engage with your idea
- Validate the desirability of your idea
Prototypes
- Create polished, clickable apps that can show (not tell) your stakeholders about ideas
- Bring your ideas to life
Create Immersive Experience prototypes (Virtual Reality, Augmented Reality, and Mixed Reality) that leverage on emerging technologies such as Microsoft HoloLens and HTC Vive.
Virtual
Virtual reality is also known as immersive multimedia or computer-simulated reality. It is a computer technology that replicates an environment -- real or imagined -- and simulates a user's physical presence and environment to allow for user interaction.
Augmented
Augmented reality is a digitally enhanced view of the real world. Turn any object, image, or place into an opportunity for AR. Watch everyday things come to life with graphics, animations, video, audio, and 3D content.
Mixed
Mixed reality is also referred to as hybrid reality. It is the merging of real and virtual worlds to produce new environments and visualizations where physical and digital objects co-exist and interact in real time.
Develop applications for web and mobile (iOS, Android, and Windows) through an end-to-end global delivery team to progress your prototypes to functional applications.
Platform
- Mobile - iOS, Android, Windows
- Web
Service
- Projects will be delivered through Agile methodology
Support
- Estimates will include testing and warranty support post application go-live of three weeks


Complete the review exercises!
Click on the link above. Log in and fork repository
if (age > 21) { printf("Yes, they are allowed to drink."); } else if (age == 21) { printf("They are recently allowed to drink."); } else { printf("No, they are not allowed to drink."); }
Boolean operators precedence (order of operations): NOT > AND > OR ! > && > ||
Some examples:


@Module class ActivityModule
Provides the api and activity for context
ActivityModule(act: MainActivity)
Provides the api and activity for context |
fun providesActivity(): MainActivity
Provides the activity for context |
|
fun providesItunesSearch(): ItunesSearchAPI
Provides the api access |


Assuming bivariate normal distribution of impact coordinates and perfect zero, the following statements are approximately equivalent:


Airdrie man banned from the roads for driving while four times the legal limit
Thomas Higgins, 31, had 94mg of alcohol in his system when approached by police officers on Coatbank Street on July 6.
by Airdrie and Coatbridge Advertiser, https://www.dailyrecord.co.uk/authors/airdrie-and-coatbridge-advertiser/A repeat offender from Airdrie who drove while more than four times the legal alcohol limit has been banned from the road for four years.
Thomas Higgins, 31, had 94mg of alcohol in his system when approached by police officers on Coatbank Street on July 6. The legal limit is only 22mg.
The procurator fiscal said: “At 12.55am police saw a vehicle in a car park and spoke to the accused.
“He was under the influence of alcohol, which could be smelled from him, and his speech was slurred.
“He was arrested and taken to the police office.”
Click here for more from Airdrie and Coatbridge
Sheriff Frank Pieri told Clement Drive resident Higgins: “This is an extremely high reading and you also have two previous convictions.
“I’ll impose an alternative to custody despite your persistent offending.
“You’ll be under supervision for one year and carry out 135 hours of unpaid work. You’re also banned from driving for four years.
“If you breach this, you could be jailed.”


BitmovinApiSdk\Models\Vp9VideoConfiguration
Synopsis
class Vp9VideoConfiguration
extends VideoConfiguration
{
- // members
- public PresetConfiguration $presetConfiguration;
- public Vp9DynamicRangeFormat $dynamicRangeFormat;
- public int $crf;
- public int $lagInFrames;
- public bool $errorResiliencyEnabled;
- public int $tileColumns;
- public int $tileRows;
- public bool $frameParallel;
- public int $maxIntraRate;
- public int $qpMin;
- public int $qpMax;
- public int $rateUndershootPct;
- public int $rateOvershootPct;
- public int $clientBufferSize;
- public int $clientInitialBufferSize;
- public int $biasPct;
- public bool $noiseSensitivity;
- public int $cpuUsed;
- public bool $automaticAltRefFramesEnabled;
- public int $targetLevel;
- public bool $rowMultiThreadingEnabled;
- public int $sharpness;
- public int $minGop;
- public int $maxGop;
- public float $minKeyframeInterval;
- public float $maxKeyframeInterval;
- public Vp9Quality $quality;
- public bool $lossless;
- public int $staticThresh;
- public Vp9AqMode $aqMode;
- public int $arnrMaxFrames;
- public int $arnrStrength;
- public Vp9ArnrType $arnrType;
- public AutoLevelSetup $autoLevelSetup;
- // Inherited members from VideoConfiguration
- public int $width;
- public int $height;
- public int $bitrate;
- public float $rate;
- public PixelFormat $pixelFormat;
- public ColorConfig $colorConfig;
- public int $sampleAspectRatioNumerator;
- public int $sampleAspectRatioDenominator;
- public DisplayAspectRatio $displayAspectRatio;
- public EncodingMode $encodingMode;
- // Inherited members from CodecConfiguration
- public static string $discriminatorName;
- public static array $discriminatorMapping;
- // Inherited members from BitmovinResource
- public string $name;
- public string $description;
- public Carbon $createdAt;
- public Carbon $modifiedAt;
- public mixed $customData;
- // Inherited members from BitmovinResponse
- public string $id;
- // methods
- public void __construct()
- public $this presetConfiguration()
- public $this dynamicRangeFormat()
- public $this crf()
- public $this lagInFrames()
- public $this errorResiliencyEnabled()
- public $this tileColumns()
- public $this tileRows()
- public $this frameParallel()
- public $this maxIntraRate()
- public $this qpMin()
- public $this qpMax()
- public $this rateUndershootPct()
- public $this rateOvershootPct()
- public $this clientBufferSize()
- public $this clientInitialBufferSize()
- public $this biasPct()
- public $this noiseSensitivity()
- public $this cpuUsed()
- public $this automaticAltRefFramesEnabled()
- public $this targetLevel()
- public $this rowMultiThreadingEnabled()
- public $this sharpness()
- public $this minGop()
- public $this maxGop()
- public $this minKeyframeInterval()
- public $this maxKeyframeInterval()
- public $this quality()
- public $this lossless()
- public $this staticThresh()
- public $this aqMode()
- public $this arnrMaxFrames()
- public $this arnrStrength()
- public $this arnrType()
- public $this autoLevelSetup()
- // Inherited methods from VideoConfiguration
- public void __construct()
- public $this width()
- public $this height()
- public $this bitrate()
- public $this rate()
- public $this pixelFormat()
- public $this colorConfig()
- public $this sampleAspectRatioNumerator()
- public $this sampleAspectRatioDenominator()
- public $this displayAspectRatio()
- public $this encodingMode()
- // Inherited methods from CodecConfiguration
- public void __construct()
- // Inherited methods from BitmovinResource
- public void __construct()
- public $this name()
- public $this description()
- public $this customData()
- // Inherited methods from BitmovinResponse
- public void __construct()
- // Inherited methods from ApiResource
- public void __construct()
- public static $this create()
- public void toArray()
Hierarchy
Members
public
- $aqMode — BitmovinApiSdk\Models\Vp9AqMode
- $arnrMaxFrames — int
- $arnrStrength — int
- $arnrType — BitmovinApiSdk\Models\Vp9ArnrType
- $autoLevelSetup — BitmovinApiSdk\Models\AutoLevelSetup
- $automaticAltRefFramesEnabled — BitmovinApiSdk\Models\bool
- $biasPct — int
- $bitrate — int
- $clientBufferSize — int
- $clientInitialBufferSize — int
- $colorConfig — BitmovinApiSdk\Models\ColorConfig
- $cpuUsed — int
- $createdAt — Carbon\Carbon
- $crf — int
- $customData — mixed
- $description — string
- $discriminatorMapping
- $discriminatorName
- $displayAspectRatio — BitmovinApiSdk\Models\DisplayAspectRatio
- $dynamicRangeFormat — BitmovinApiSdk\Models\Vp9DynamicRangeFormat
- $encodingMode — BitmovinApiSdk\Models\EncodingMode
- $errorResiliencyEnabled — BitmovinApiSdk\Models\bool
- $frameParallel — BitmovinApiSdk\Models\bool
- $height — int
- $id — string
- $lagInFrames — int
- $lossless — BitmovinApiSdk\Models\bool
- $maxGop — int
- $maxIntraRate — int
- $maxKeyframeInterval — float
- $minGop — int
- $minKeyframeInterval — float
- $modifiedAt — Carbon\Carbon
- $name — string
- $noiseSensitivity — BitmovinApiSdk\Models\bool
- $pixelFormat — BitmovinApiSdk\Models\PixelFormat
- $presetConfiguration — BitmovinApiSdk\Models\PresetConfiguration
- $qpMax — int
- $qpMin — int
- $quality — BitmovinApiSdk\Models\Vp9Quality
- $rate — float
- $rateOvershootPct — int
- $rateUndershootPct — int
- $rowMultiThreadingEnabled — BitmovinApiSdk\Models\bool
- $sampleAspectRatioDenominator — int
- $sampleAspectRatioNumerator — int
- $staticThresh — int
- $targetLevel — int
- $tileColumns — int
- $tileRows — int
- $width — int
Methods
public
- __construct()
- aqMode() — aqMode
- arnrMaxFrames() — altref noise reduction max frame count.
- arnrStrength() — altref noise reduction filter strength.
- arnrType() — arnrType
- autoLevelSetup() — Enable/disable automatic calculation of level, maxBitrate, and bufsize based on the least level that satisfies maximum property values for picture resolution, frame rate, and bit rate. In the case the target level is set explicitly, the maximum bitrate and buffer size are calculated based on the defined level. Explicitly setting rateOvershootPct, or clientBufferSize properties will disable the automatic calculation.
- automaticAltRefFramesEnabled() — Enable automatic alternate reference frames (2pass only)
- biasPct() — CBR/VBR bias (0=CBR, 100=VBR)
- clientBufferSize() — Client buffer size (ms)
- clientInitialBufferSize() — Client initial buffer size (ms)
- cpuUsed() — Controls the tradeoff between compression efficiency and encoding speed. Higher values indicate a faster encoding. The minimum value for width * height >= 1280 * 720 is 2. If the value is too low it will be overridden.
- crf() — Constant rate factor for quality-based variable bitrate. Either bitrate or crf is required.
- dynamicRangeFormat() — Automatically configures the VP9 Video Codec to be compatible with the given SDR/HLG format. Bitmovin recommends to use the dynamic range format together with a preset configuration to achieve good results. Explicitly configured properties will take precedence over dynamic range format settings, which in turn will take precedence over preset configurations.
- errorResiliencyEnabled() — Enables error resiliency feature
- frameParallel() — Enable frame parallel decodability features
- lagInFrames() — Number of frames to look ahead for alternate reference frame selection.
- lossless() — Lossless mode
- maxGop() — Maximum GOP length, the maximum distance between I-frames
- maxIntraRate() — Maximum I-frame bitrate (percentage) 0=unlimited
- maxKeyframeInterval() — Maximum interval in seconds between key frames
- minGop() — Minimum GOP length, the minimum distance between I-frames.
- minKeyframeInterval() — Minimum interval in seconds between key frames
- noiseSensitivity() — Enable noise sensitivity on Y channel
- presetConfiguration() — Choose from a set of preset configurations tailored for common use cases. Check out [VP9 Presets](https://bitmovin.com/docs/encoding/tutorials/vp9-presets) to see which values get applied by each preset. Explicitly setting a property to a different value will override the preset's value for that property.
- qpMax() — Maximum quantization factor.
- qpMin() — Minimum quantization factor.
- quality() — quality
- rateOvershootPct() — Datarate overshoot (max) target (percentage).
- rateUndershootPct() — Datarate undershoot (min) target (percentage).
- rowMultiThreadingEnabled() — Enable row based non-deterministic multi-threading
- staticThresh() — A change threshold on blocks below which they will be skipped by the encoder.
- targetLevel() — Target level (255: off, 0: only keep level stats; 10: level 1.0; 11: level 1.1; ... 62: level 6.2)
- tileColumns() — Number of tile columns to use, log2. Depending on the encoding width there are limitations on this value. The minimum values are 2 for width >= 1920 and 1 for width >= 1280. The minimum width of each tile is 256 pixels so the maximum values are 0 for width < 256, 1 for width < 512, 2 for width < 1024, 3 for width < 2048, 4 for width < 4096, 5 for width < 8192. If the value is too high or too low it will be overridden.
- tileRows() — Number of tile rows to use, log2.
Inherited from BitmovinApiSdk\Models\VideoConfiguration
public
- bitrate() — Target bitrate for the encoded video in bps. Either bitrate or crf is required.
- colorConfig() — colorConfig
- displayAspectRatio() — Specifies a display aspect ratio (DAR) to be enforced. The sample aspect ratio (SAR) will be adjusted accordingly. If set then sampleAspectRatioNumerator and sampleAspectRatioDenominator are not allowed.
- encodingMode() — The mode of the encoding. When this is set, `encodingMode` (`liveEncodingMode`) must not be set in the (live) encoding start request.
- height() — Height of the encoded video in pixels
- pixelFormat() — Describes the color encoding, bit depth, and chroma subsampling of each pixel in the output image.
- rate() — Target frame rate of the encoded video. Must be set for live encodings
- sampleAspectRatioDenominator() — The denominator of the sample aspect ratio (also known as pixel aspect ratio). Must be set if sampleAspectRatioNumerator is set. If set then displayAspectRatio is not allowed.
- sampleAspectRatioNumerator() — The numerator of the sample aspect ratio (also known as pixel aspect ratio). Must be set if sampleAspectRatioDenominator is set. If set then displayAspectRatio is not allowed.
- width() — Width of the encoded video in pixels
Inherited from BitmovinApiSdk\Models\BitmovinResource
public
- customData() — User-specific meta data. This can hold anything.
- description() — Description of the resource. Can be freely chosen by the user.
- name() — Name of the resource. Can be freely chosen by the user.


HTML documents are made of HTML elements. When writing HTML, we tell browsers the type of each element by
using HTML tags. Example below:
Tags: "b" tag (bold) or "em" tag (italics or emphais). Tags are made up of an open tag and a closed tag with some sort of
contents between them. The contents that falls between the open and close tags is what the tags are being applied to.
Attributes: "a" (anchor) attribute is for creating links. This attribute is made up of the attribute name (href), value (web address "www.google.com"), and discripter word that will be highlighted indicating a link is present.
Image: "img" (image) tags are VOID tags, which means they don't have content. They are made up of src (source or location of saved image) and alt (alternate text to be displayed when image fails to load.
White Space
White space is defined as all "blank" spaces, tabs, or returns. In HTML all white space is seen as a single space. A return line tag has to be used display multiple lines. Examples below:
Return Line: "br" ( break) or "p" (paragraph). break tags are void tags, where paragraph tags are not void. This means break tags are only a signle tag (no open and close tag) and paragraph tags have and open tag, content, and a close tag.
Inline/Block: inline tags are inline with text(br). Block tags have contents and place a block or box around the contents that has both hight and width.
SPAN: is an inline tag
DIV: is a block tag