CVE-2019-7119

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7116

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2019-7827

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2019-7802

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information...

CVE-2019-7780

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead...

Arbitrary Code Execution

The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewi...

Adobe Acrobat DC (Classic Track) Security Updates (APSB19-18) - Windows

Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for the Diagnostic Hub Standard Collector elevation of privilege vulnerability in Visual Studio 2015 Update 3 (KB4489639)

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations...

Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics CRM 2015 (on-premises) version 7.0: May 14, 2019

Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics CRM 2015 on-premises version 7.0: May 14, 2019 INTRODUCTION Update 0.3 Hotfix 2 for Microsoft Dynamics CRM 2015 is now available. This article describes the hotfixes and updates that are include...

Microsoft Dynamics On-Premise CVE-2019-1008 Security Bypass Vulnerability

Description Microsoft Dynamics is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Dynamics 365 on-premises 8.2 Microsoft Dynamics 365 on-premises 9 Microsoft...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1523)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users t...

EulerOS Virtualization for ARM 64 3.0.1.0 : glibc (EulerOS-SA-2019-1386)

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname...

EulerOS Virtualization 3.0.1.0 : gcc (EulerOS-SA-2019-1461)

According to the version of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The std::randomdevice class in libstdc++ in the GNU Compiler Collection aka GCC before 4.9.4 does not properly handle short reads from...

EulerOS Virtualization for ARM 64 3.0.1.0 : libXcursor (EulerOS-SA-2019-1395)

According to the version of the libXcursor package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1...

EulerOS Virtualization for ARM 64 3.0.1.0 : libpng12 (EulerOS-SA-2019-1391)

According to the versions of the libpng12 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use...

CVE-2015-9287

creationtimestamp| type| source ---|---|--- 2019-05-13 20:31:41+00:00| seen| https://t.me/cibsecurity/4276 2019-05-20 16:30:32+00:00| seen| https://t.me/cibsecurity/4387...

CVE-2015-9287

Affected software: University of Cambridge mod_ucam_webauth before 2.0.2. Vulnerability/source: Directory Traversal due to manipulation of the IdP's WLS-Response kid field, which is not signed. Root cause: kid field should be an integer but accepts any string. Impact (per documents): attacker cou...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1490)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The oomreaptaskmm function in mm/oomkill.c in the Linux kernel, before 4.14.4, mishandles gather operations. This allo...

CVE-2015-1006

CVE-2015-1006 concerns a heap-based buffer overflow in a vulnerable Opto 22 component (PAC Project Professional/Basic, PAC Display Basic/Professional, OptoOPCServer, OptoDataLink installed by the PAC Project installer) that may allow remote code execution. Affected product versions are prior to R...