KLA11592 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

KLA11566 RCE vulnerability in Foxit Reader

Out-of-bounds reading vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability via specially designed document to execute arbitrary code or cause denial of service. Technical details Potentially vulnerable components are AcroForm, TIF File ConvertToPDF, JPG File...

KLA11567 ACE vulnerability in LibreOffice

Vulnerability related to macros was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-9853 Exploitation Related products LibreOffice CVE list CVE-2019-9853 high Solution Update to the latest version Download LibreOffice...

KLA11564 ACE vulnerability in Microsoft Browser

Unspecified vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1367 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is classifie...

KLA11591 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Vulnerability related to document.domain can be exploited...

Weak Password Vulnerability in Mingguo Comprehensive Log Audit Platform of Hangzhou Anheng Information Technology Co.

MingGuard Integrated Log Audit Platform is a comprehensive management platform as an information system. There is a weak password vulnerability in Mingguo Comprehensive Log Audit Platform of Hangzhou ACE Information Technology Co., Ltd, which can be exploited by an attacker to log in to the syste...

KLA12402 SB vulnerability in OpenOffice

Security bypass vulnerability was found in OpenOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-9853 Exploitation Related products OpenOffice.org CVE list CVE-2019-9853 critical Solution Update to the latest version Download OpenOffice...

KLA11581 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in IndexedDB can be exploited to execute arbitrary code; 2. Use-after-free vulnerability ...

KLA11547 Multiple ACE vulnerabilities in Adobe Flash Player

Multiple vulnerabilities were found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerability can be exploited remotely to execute arbitrary code; 2. A same origin method...

KLA11579 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via specially crafted text file...

KLA11580 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via specially crafted text file...

KLA11561 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. Unspecified...

KLA11738 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. DoS vulnerability in V8 component can be exploited remotely via special crafted webpage. 2. OSI...

KLA11523 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service and obtain sensitive information. Below is a complete list of vulnerabilities: 1. Unspecified vulnerability can be exploited to cause denial of service; 2. Unspecifie...

KLA11524 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, cause denial of service, perform cross-site scripting attack, obtain sensitive information, execute arbitrary code. Below is a...

KLA11515 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, perform cross-site scripting attack, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete...

KLA11517 ACE vulnerability in Microsoft SQL Server

Remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1068 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware...

File Upload Vulnerability in YFCMF Fi***.p*** Page

YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the YFCMF Fi.p page, which can be exploited by an attacker to gain server privileges...

KLA11506 Buffer overflow vulnerability in PostgreSQL

Buffer overflow vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability via special payload during password changing process to cause denial of service. Original advisories PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18, 9.4.23, and 12 Beta 2 Released Exploitation Public...

KLA11508 Type confusion vulnerability in Mozilla Firefox ESR

Type confusion vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories mfsa2019-18 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...