Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-14463)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

CVE-2018-14282

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Google Chrome memory misreference vulnerability (CNVD-2018-17045)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in Blink in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

CVE-2018-11060

RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges...

CVE-2018-5049

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

DEBIAN-CVE-2018-14451

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp...

ALPINE-CVE-2018-14447

trimwhitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read...

CVE-2018-8309

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 200...

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability (CNVD-2018-14931)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2018-13403)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-14489)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

PBC Buffer Overflow Vulnerability (CNVD-2018-15645)

PBC is a Google protocol buffer library written in C. A buffer overflow vulnerability exists in the calchash file of the map.c file of the libpbc.a static link library in PBC 2017-03-02 and earlier versions. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...

Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2018-12939)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader security vulnerabilities exist. Remote attackers can exploit the...

kxk.ru XSS vulnerability

Open Bug Bounty ID: OBB-632964 Description| Value ---|--- Affected Website:| kxk.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ocn.ne.jp XSS vulnerability

Open Bug Bounty ID: OBB-630330 Description| Value ---|--- Affected Website:| ocn.ne.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

issues.unrealengine.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-628059 Description| Value ---|--- Affected Website:| issues.unrealengine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden...

Google Android Framework Information Disclosure Vulnerability (CNVD-2018-12612)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Framework component of Google Android. An attacker can exploit this vulnerability to obtain information...

Google Android Qualcomm Component Elevation of Privilege Vulnerability (CNVD-2018-12660)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android Qualcomm component WLAN Host. An attacker can exploit this vulnerability to achieve elevation of privilege...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15870)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the updatecontainer method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

SAP NetWeaver Instance Agent Service Information Disclosure Vulnerability (CNVD-2018-15773)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver. An attacker could exploit this vulnerability to...