Memory Corruption Vulnerability in iPubsoft PDF Splitter

iPubsoft PDF Splitter is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF Splitter, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2021-28275)

Jetty is a pure Java-based web server and Java Servlet container . A cross-site scripting vulnerability exists in Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118. The vulnerability stems from an exception message in stacktraces contained in the generated unescaped...

CVE-2019-5860

Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Micro Focus Operations Agent XXE Vulnerability

Micro Focus Operations Agent helps you monitor your system by collecting metrics that indicate the operational status, performance, resource utilization, and availability of essential elements of your system. A XXE vulnerability exists in Micro Focus Operations Agent, which can be exploited by...

Microsoft Visual Studio Elevation of Privilege Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio that stems from the progra...

DirectWrite Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts wi...

CVE-2019-5840

Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Command Execution Vulnerability in S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system has a command execution vulnerability that can be exploited by an attacker to execute...

IBM Marketing Platform Information Disclosure Vulnerability

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. An information disclosure...

The vulnerability of the KMD module in Intel Graphics Driver allows a hacker to trigger a service failure.

The vulnerability of the KMD module in the Intel Graphics Driver lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Computrols CBAS Web Cross-Site Request Forgery Vulnerability

Computrols CBAS is a building automation system from Computrols USA. A cross-site request forgery vulnerability exists in Computrols CBAS, which can be exploited by an attacker to send unintended requests to a server via an affected client...

Privilege Escalation

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation attacks. Affected Libraries component allows a remote attacker to exploit this flaw. Successful attacks can result in the takeover of Java SE, Java SE Embedded...

Information disclosure

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable...

Ultra-rights access vulnerability exists in DreamWalk OL

Four Thirty Nine Networks Corporation is an operator providing Internet leisure and entertainment game applications and information services. A vulnerability exists in override access to Dream Journey OL, which can be exploited by attackers to obtain information about other users...

PuTTY Random Number Reuse Vulnerability

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A random number reuse vulnerability exists in PuTTY versions prior to 0.71 used in cryptography. An attacker can exploit this vulnerability to potentially recycle random numbers used in...

Logic flaw vulnerability in nzcms

Jinhua Ningzhi Network Technology Co., Ltd. is / government agencies / public security agencies / military agencies / school institutions / business companies / e-commerce office platform construction technology and service providers. nzcms has a logic flaw vulnerability that can be exploited by...

Google Android System Information Disclosure Vulnerability (CNVD-2019-10467)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

Code injection

An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has...

WordPress 4.3.x < 4.3.11 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

Apple iOS and tvOS iTunes Store Password Prompt Spoofing Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. iTunes Store is a component of the iTunes Store that is a digital media web store with an exclusive software interface. A security...