10379 matches found
ACD Systems Canvas Draw 4 Invert Map Out-of-Bounds Write Code Execution Vulnerability
Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...
ACD Systems Canvas Draw 4 IO Metadata Out-of-Bounds Write Code Execution Vulnerability
Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...
skia/api_mock_gpu_canvas: Container-overflow in SkFindAndPlaceGlyph::ArbitraryPositions::nextPoint
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5097160457584640 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...
Chrome Now Features Site Isolation to Defend Against Spectre
Google introduced new security mitigations for its Chrome browser to defend against recently discovered Spectre variants. The new security feature, called site isolation, essentially isolates different browser work processes between various browser tabs. That means one tab’s webpage rendering and...
Fresh Spectre Variants Come to Light
Two new speculative execution bugs have earned researchers a $100,000 bug bounty from Intel. MIT’s Vladimir Kiriansky and independent researcher Carl Waldspurger uncovered what they call Spectre1.1 and a subset, Spectre1.2, collectively referred to as Variant 4 of Spectre by Intel and ARM. Like t...
CVE-2018-8172
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4...
Remote code execution
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4...
CVE-2018-8172
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4...
CVE-2018-8172
The CVE-2018-8172 entry pertains to a remote code execution vulnerability in Visual Studio family (including Visual Studio and Expression Blend) where the product fails to validate the source markup of an unbuilt project file. Root cause: improper handling of source markup in unbuilt files leadin...
CVE-2018-8172
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4...
Description of the security update for Expression Blend 4: July 10, 2018
Description of the security update for Expression Blend 4: July 10, 2018 Summary A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project. To learn more about the vulnerability, go to CVE-2018-8172...
PT-2018-3940 · Microsoft · Expression Blend 4 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Expression Blend 4 affected versions not specified Description: A remote code execution issue exists due to insufficient access control checks in the software, potentially allowing an...
Node.js 'path' Module Regular Expression DoS Vulnerability - Windows
Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...
CVE-2018-4858
Siemens CVE-2018-4858 affects IEC 61850 system configurator family (IEC 61850 system configurator < v5.80; DIGSI 5 < v7.80; DIGSI 4 < v4.93; SICAM PAS/PQS < v8.11; SICAM PQ Analyzer < v3.11; SICAM SCC
CVE-2018-4858
A vulnerability has been identified in IEC 61850 system configurator All versions V5.80, DIGSI 5 affected as IEC 61850 system configurator is incorporated All versions V7.80, DIGSI 4 All versions V4.93, SICAM PAS/PQS All versions V8.11, SICAM PQ Analyzer All versions V3.11, SICAM SCC All versions...
HPE Integrated Lights-Out 4 Authentication Bypass (CVE-2017-12542)
An authentication bypass vulnerability exists in HPE Integrated Lights-Out 4. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...
sjg.pequannock.org XSS vulnerability
Open Bug Bounty ID: OBB-641340 Description| Value ---|--- Affected Website:| sjg.pequannock.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Threat Outbreak Alert RuleID33107: Email Messages Distributing Malicious Software on July 4, 2018
Medium Alert ID: 58355 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33107 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID33104: Email Messages Distributing Malicious Software on July 4, 2018
Medium Alert ID: 58363 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33104 may contain the following files: Name | Size...