WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-24572)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...

The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.

The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted PDF-format content...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

django-epiceditor vulnerable to XSS in form field

There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field...

GHSA-XP5M-4C9F-498Q django-epiceditor vulnerable to XSS in form field

There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field...

Microsoft Lync and Skype for Business Remote Code Execution Vulnerability (CNVD-2018-15859)

Microsoft Lync and Skype for Business are both products of Microsoft Corporation, USA.Microsoft Lync formerly known as Microsoft Office Communicator is a new generation of integrated enterprise communication platform released.Skype for Business is a Skype for Business is an integrated enterprise...

Adobe Flash Player Out-of-Bounds Memory Read Vulnerability (CNVD-2018-13399)

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from an out-of-bounds memory read vulnerability. A remote user coul...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2018-13400)

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a type confusion vulnerability. A remote user could exploit th...

The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-08797)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Edge Information Disclosure Vulnerability (CVE-2018-0892)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. An informatio...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07774)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07771)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-07312)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An arbitrary code execution vulnerability exists in Mozilla Firefox. A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code on the...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-07313)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An arbitrary code execution vulnerability exists in Mozilla Firefox. A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code on the...

Adobe Flash Player Type Obfuscation Vulnerability

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. Adobe Flash Player suffers from a type confusion vulnerability. A remote user could exploit th...

Heap Overflow Vulnerability in Multiple Adobe Products (CNVD-2018-05057)

Acrobat DC Continuous Track and so on are the United States of America Auduby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the PDF solution of the continuous update version. Reader DC Continuous Track is a PDF reading tool of the continuous update version. Reader ...

Adobe Flash Player Memory Error Reference Remote Code Execution Vulnerability (CNVD-2018-02962)

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory error referencing remote code execution vulnerability exists in Adobe Flash Player...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2018-02260)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; iCloud for Windows is a Windows-based cloud service; and iTunes for Windows is a Windows-based media player application. WebKit is one of the web browser engine components. A memory...

Microsoft Edge Memory Corruption Vulnerability

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...