CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

LibSass Denial of Service Vulnerability (CNVD-2019-06790)

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'handleerror' function of the sasscontext.cpp file in LibSass versions prior to 3.5.5. An attacker can exploit this vulnerability to cause a denial of service with the help of ...

Unspecified Vulnerability in Schneider Electric StruxureWare Data Center Operation

Schneider Electric StruxureWare Data Center Operation is a suite of data center operations software from Schneider Electric, France. The software provides an instant overview of data center operations through inventory management, PUE calculations, real-time equipment alerts and location-based...

The vulnerability of the Microsoft Project project management software and the Office 365 suite, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Project project management software and the Office 365 suite arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp allows remote attackers to crash the application via a crafted file...

Null pointer dereference

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

PYSEC-2018-143

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2018-19607

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2018-19607

CVE-2018-19607 : In Exiv2, the function Exiv2::isoSpeed in easyaccess.cpp for version 0.27-RC2 can be triggered by a crafted image file, causing a NULL pointer dereference and an application crash (DoS). The vulnerability is documented in multiple advisories (e.g., Exiv2-related CVEs listed in Eu...

ImageMagick Denial of Service Vulnerability (CNVD-2018-26708)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory disclosure vulnerability exists in the WritePCXImage of coders/pcx.c file in ImageMagick version 7.0.7-28. A...

The vulnerability of Cisco Immunet and Cisco Advanced Malware Protection’s scanning components allows attackers to disable the scanning service.

The vulnerability of Cisco Immunet and Cisco Advanced Malware Protection scanning components is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to disable the scanning service using a specially crafted file...

CVE-2018-19459

Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file...

PT-2018-3683 · Google +9 · Libwebp +9

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A heap-based buffer overflow was found in libwebp, related to a buffer overflow issue when reading beyond the buffer boundaries in memory. This issue can be exploited by a remote attacker to gain...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4022147)

This host is missing a critical security update according to Microsoft KB4022147 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-19353

The ansiloveansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file...

CVE-2018-19353

The ansiloveansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file...

Out-of-bounds

The ansiloveansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file...

Microsoft Windows PowerShell Remote Code Execution Vulnerability

Microsoft.PowerShell.Archive and others are products of Microsoft Corporation.Microsoft Windows 10 is a suite of operating systems.PowerShell Core is a set of cross-platform command-line script execution environments built for heterogeneous environments and hybrid clouds.PowerShell Core is a suit...

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory. A remote attacker can exploit the vulnerabili...