CVE-2019-1283

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'...

CVE-2019-1283

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'...

CVE-2019-1283

CVE-2019-1283 affects Microsoft Graphics Components and is an information disclosure vulnerability in how memory objects are handled. The Microsoft MSRC entry (Microsoft Graphics Components Information Disclosure Vulnerability) notes that an attacker could obtain information useful for further ex...

CVE-2019-1283: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'...

CVE-2017-18604

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request...

CVE-2017-18604

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request...

CVE-2017-18604

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request...

CVE-2017-18604

The CVE-2017-18604 entry concerns the WordPress plugin sitebuilder-dynamic-components (up to version 1.0). Multiple sources confirm a PHP object injection vulnerability reachable via AJAX requests, enabling an unauthenticated/vector-based impact with HIGH integrity risk (CVSS v3.1: 7.5). Affected...

Microsoft Graphics Components Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information that could be useful for further exploitation. To exploit the vulnerability, a user would have t...

September 10, 2019—KB4516026 (Monthly Rollup)

September 10, 2019—KB4516026 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Improvements and fixes This security update includes improvements and fixes that were a part of update KB4512499 released August 17, 2019 and addresses the following issues: Provides protections against a ne...

CVE-2017-18604: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request...

PT-2019-8535

Name of the Vulnerable Software and Affected Versions sitebuilder-dynamic-components plugin through 1.0 for WordPress Description The issue concerns PHP object injection via an AJAX request. This allows for potential exploitation. No information is provided about the estimated number of potential...

PT-2019-3215

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Components affected versions not specified Microsoft Windows affected versions not specified Description An information disclosure issue exists due to errors in handling objects in memory. This could allow an attacker to...

How to Get a Handle on Patch Management

Patch management is a thankless job. Data shows, despite best efforts, that 80 percent of enterprise applications have at least one unpatched vulnerability in them, according research by Veracode. It is not for lack of trying that vulnerabilities persist. Last year 16,500 vulnerabilities were...

CVE-2019-14261

An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...

Pixel Update Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2019-09-05 or later address all issues in this bulletin and all issues in the September 2019 Android...

components-mart.my Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting components-mart.my website and its users. Following...

components-mart.dk Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1916 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting components-mart.dk website and its users. Following...

components-mart.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-954307 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting components-mart.nl...