The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

The vulnerability of the “jhash” hash function in the Linux operating system’s kernel allows a hacker to disclose sensitive information that is protected by this function.

The vulnerability of the “jhash” hash function in the Linux operating system’s kernel is related to errors in the processing of identifier fields. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted web page...

[ASA-201908-3] python2-django: multiple issues

Arch Linux Security Advisory ASA-201908-3 ========================================= Severity: Medium Date : 2019-08-05 CVE-ID : CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235 Package : python2-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1014...

[ASA-201908-2] python-django: multiple issues

Arch Linux Security Advisory ASA-201908-2 ========================================= Severity: Medium Date : 2019-08-05 CVE-ID : CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1015...

CVE-2019-1081

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Arbitrary Code Execution

Firefox is vulnerable to arbitrary code execution attacks. A remote user could create specially crafted content that, when loaded by the target user which leads to execute arbitrary code on the target user's system...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Multiple Apple products WebKit cross-site scripting vulnerability (CNVD-2019-09736)

Apple Safari is a web browser that is the default browser that comes with the MacOSX and iOS operating systems. apple iOS is a set of operating systems developed for mobile devices. apple tvOS is a set of operating systems for smart TVs. webKit is a component of the web browser engine. WebKit is...

The vulnerability of the Microsoft JET Database Engine database management system on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database management system on Windows operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, convincing users to open specially created content...

CVE-2019-6982

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

Cross-site scripting vulnerability in multiple Apple products (CNVD-2019-02756)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. A cross-site scripting vulnerability exists in the Safari Reader component in Apple iOS versions prior to 12.1.3 and Safari...

Denial Of Service (DoS) Infinite Loop

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service infinite loop via a crafted Content-Disposion header...

The vulnerability of Microsoft Excel’s spreadsheet editor lies in errors related to object processing mechanisms in memory, which allow attackers to execute arbitrary code with privileges of the current user.

The vulnerability of Microsoft Excel editors is related to errors in the memory handling of objects. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current user, using specially crafted content...

The vulnerability of the Microsoft Outlook email client, related to errors in memory object handling mechanisms, allows a perpetrator to execute arbitrary code with the privileges of the current user.

The vulnerability of the Microsoft Outlook email client is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code with the privileges of the current user, using specially crafted content...

GHSA-XX68-JFCG-XMMF Commons FileUpload Denial of service vulnerability

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted Content-Type header that bypasses a loop's intended exit conditions...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-25673)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that comes with Mac OS X and iOS; WebKit is an open source web browser engine jointly developed by KDE, Apple, and Google. WebKit is a set of open source Web browser engine jointly developed by KDE, Apple Apple...

webkitgtk: memory corruption processing maliciously crafted web content

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote...

The vulnerability of Microsoft Edge browser, related to the false representation of information by the user interface, allows a hacker to replace the content of a webpage.

The vulnerability of Microsoft Edge relates to the false representation of information by the user interface. Exploiting this vulnerability allows a malicious actor to replace the content of a webpage with specially crafted web content...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-24572)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...