The vulnerability of the manhole utility in the python-twisted-core package, which allows a intruder to cause a service failure

The vulnerability of the manhole utility in the python-twisted-core package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...

GLSA-201903-02 : Zsh: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201903-02 Zsh: User-assisted execution of arbitrary code Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line...

CVE-2018-19021

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service...

CVE-2018-1000874

DISPUTED PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by...

CVE-2018-14804

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution...

Mozilla Firefox for Android Spoofing Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 62 for Android. The vulnerability can be exploited by remote attackers to spoof the contents of the...

The vulnerability of Firefox browser, related to cursor rendering errors when the cursor is moved over certain web page elements, allows a hacker to disable the display of the browser.

The vulnerability of Firefox browsers is related to errors in cursor handling when the cursor is moved over certain elements on a web page. Exploiting this vulnerability allows an attacker to make the cursor invisible using a specially crafted script...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is...

The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, related to insecure privilege management, allows unauthorized access to root rights.

The vulnerability of Kaspersky Secure Mail Gateway lies in the insecure management of privileges. Exploiting this vulnerability could allow a local attacker to gain root access to the targeted system using a specially crafted script...

The vulnerability of the cmd parameter in D-Link router microprogramming devices such as D-Link DNS-320L, D-Link DNS-327L, D-Link DNR-326, D-Link DNS-320B, D-Link DNS-345, D-Link DNS-325, and D-Link DNS-322L allows attackers to bypass the authentication process.

The vulnerability of the cmd parameter in D-Link DNS-320L, D-Link DNS-327L, D-Link DNR-326, D-Link DNS-320B, D-Link DNS-345, D-Link DNS-325, and D-Link DNS-322L routers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read. The parseryyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service invalid write or read or possibly have unspecified other impact via a crafted Ruby script, related to the...

CVE-2014-7953

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat'...

Medium: R

Issue Overview: An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this...

The vulnerability of the iOS operating system and the Mac OS X operating system allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the CoreText component in the iOS operating system and the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

PT-2017-9757 · R Development Core Team +2 · R +2

Name of the Vulnerable Software and Affected Versions: R version 3.3.0 Description: A buffer overflow issue exists in the LoadEncoding functionality. This can be triggered by a specially crafted R script, causing a buffer overflow that results in memory corruption. An attacker can exploit this by...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of component ATS in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, or cause a service failure memory corruption, application...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in Mozilla Firefox ESR due to improper initialization of memory intended for displaying GIFs. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the process’s memory, through a specially crafted web script that interacts...

Code injection

F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification EAV monitor script...

The vulnerability of the ATML component in Microsoft Lync, the Microsoft Office suite, and the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the ATML component in Microsoft Lync, the Microsoft Office suite, and the Windows operating system is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted script file...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the CoreText component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted script file...