Intel® SGX DCAP Software Advisory

Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX Datacenter Attestation Primitives DCAP software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-8766 Description...

Apple iCloud 10.x < 10.8 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.8. It is, therefore, affected by multiple vulnerabilities: - Multiple arbitrary code execution vulnerabilities exist with in the WebKit due to multiple memory corruption issues. An...

Symphony CMS Cross-Site Scripting (CVE-2015-8766)

A cross site scripting vulnerability exists in Symphony CMS. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8766

CVE-2019-8766 is a memory-corruption family entry observed across multiple products. Public references show the issue being addressed by memory-management fixes that mitigate arbitrary-code execution when processing malicious web content. Reported fixes appear in watchOS 6.1 and iCloud for Window...

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2591)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2587)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:3044-1)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

KLA11592 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

CVE-2018-8766

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/adminvod.php?action=add...

CVE-2018-8766

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/adminvod.php?action=add...

CVE-2018-8766

Joyplus-CMS 1.6.0 is affected by an arbitrary file upload in manager/editor/upload.php (related to manager/admin_vod.php?action=add), enabling potential remote code execution due to insufficient validation of uploaded content. The vulnerability is described across multiple sources (including CVE-...

CVE-2017-8766

IrfanView version 4.44 32bit allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue...

CVE-2017-8766

CVE-2017-8766 concerns IrfanView 4.44 (32‑bit). The connected documentation confirms a vulnerability in the program’s handling of .mov files that can cause arbitrary code execution, linked to a User Mode Write AV near NULL. The Kaspersky advisory enumerates a set of buffer‑overflow issues in Irfa...

CVE-2016-8766

...

CVE-2016-8766

CVE-2016-8766 is rejected/not used and does not represent an active vulnerability entry.

CVE-2015-8766

Symphony CMS is affected by CVE-2015-8766. Multiple XSS flaws exist in content/systempreferences.php prior to version 2.6.4, allowing remote attackers to inject arbitrary scripts or HTML via parameters such as email_sendmail[from_name], email_sendmail[from_address], email_smtp[from_name], email_s...

CVE-2014-8766

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

CVE-2014-8766

CVE-2014-8766 involves multiple SQL injection vulnerabilities in Allomani Weblinks 1.0. The affected component is the Weblinks application (index.php browse action and admin.php) where attacker-supplied input in the cat parameter (in browse) or other unspecified parameters (in admin) can lead to ...