6435 matches found
ai.grakn:client-java (1.3.0), ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0) +3852 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.6.1-rc1, <=2.10.6)
org.scala-lang:scala-compiler MAVEN version =2.6.1-rc1, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.3_2.11 (>=0.25, <=1.2.7) +3609 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.11.0, <=2.11.11)
org.scala-lang:scala-compiler MAVEN version =2.11.0, =0.25, =0.42.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.4.1, =2.0.0, =3.34.0.3-1-2.2, =2.0.0, =2.0.0, =2.0.18, =2.0.0, =2.2.10 and more Source cves: CVE-2017-15288 Source advisory: MEND:CVE-2017-15288...
Arbitrary Code Execution
scala-compiler is vulnerable to arbitrary code execution. A malicious user can write and execute arbitrary scala class files on the system through the compiler daemon due to weak permissions for private files in /tmp/scala-devel/$USER:shared/scalac-compile-server-port...
CVE-2017-11874: Undefined Security Weakness
Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Edge as a result of how memory is accessed in code compiled by the Edge Just-In-Time JIT compiler that allows Control Flow Guard CFG to be bypassed. By itself, this CFG bypass vulnerability does not allow arbitrary code execution. Howeve...
PT-2017-12279
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security feature bypass issue exists due to how memory is accessed in code compiled by the Edge Just-In-Time JIT compiler, allowing Control Flow Guard CFG to be bypassed. This issue...
October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 (KB 4043769)
October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 KB 4043769 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 update...
Microsoft Edge Chakra JIT - Incorrect GenerateBailOut Calling Patterns
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1333 Bailout: "ChakraCore’s background JIT compiler generates highly optimized JIT’ed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynamic nature of...
Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2017-11799)
Bailout: "ChakraCore’s background JIT compiler generates highly optimized JIT’ed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynamic nature of JavaScript code, if the code gets executed in a way that breaks the profil...
Microsoft Edge Chakra JIT Incorrect GenerateBailOut Calling Patterns
Microsoft Edge: Chakra: JIT: Incorrect GenerateBailOut calling patterns CVE-2017-11799 Bailout: "ChakraCoreas background JIT compiler generates highly optimized JITaed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynam...
Medium: openssh
Issue Overview: A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could possibly use this flaw to determine valid user names by measuring the timing of server responses. CVE-2016-6210 It was found that OpenSSH...
[SECURITY] Fedora 27 Update: pkgconf-1.3.9-1.fc27
pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is similar to pkg-config from freedesktop.org and handles .pc files in a similar manner as pkg-config...
Linux/x86_64 - mkdir() evil Shellcode (30 bytes)
/ ;Title: Linux/x8664 - mkdir shellcode 30 bytes ;Author: Touhid M.Shaikh ;Contact: https://github.com/touhidshaikh ;Category: Shellcode ;Architecture: Linux x8664 ;Description: Create Folder with 755 permission. ; You can Change folder by change code in ASM in fname Field ;Shellcode Length: 30...
FreeBSD : perl -- multiple vulnerabilities (d9e82328-a129-11e7-987e-4f174049b30a)
SO-AND-SO reports : CVE-2017-12814: $ENV$key stack-based buffer overflow on Windows A possible stack-based buffer overflow in the %ENV code on Windows has been fixed by removing the buffer completely since it was superfluous anyway. CVE-2017-12837: Heap buffer overflow in regular expression...
ALPINE-CVE-2017-12883
Buffer overflow in the SgrokbslashN function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service application crash via a crafted regular expression with an invalid '\NU+...' escape...
Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and for the .NET Framework 4.6 for Windows Server 2008 SP2: September 12, 2017
Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and for the .NET Framework 4.6 for Windows Server 2008 SP2: September 12, 2017 Applies To .NET Framework 4.7 .NET Framework 4.6 .NET Framework 4.6.1 .N...
OCaml compiler elevation of privilege vulnerability
OCaml compiler is a compiler for OCaml maintained by the OCaml community that generates standalone programs and supports batch-oriented processing. A security vulnerability exists in OCaml compiler. An attacker can exploit this vulnerability to elevate privileges...
CVE-2017-9779
OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."...