Adobe Photoshop CC Remote Information Disclosure Vulnerability

Adobe Photoshop CC is the latest set of image processing and drawing software. A remote information disclosure vulnerability exists in Adobe Photoshop CC, which allows remote attackers to exploit the vulnerability by submitting a special file request and tricking the user into parsing it, which...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-23749)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel, which results from the program failing to properly handle objects in memory. A remote attacker can exploit the...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-24092)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel, which arises from the program's failure to properly handle objects in memory. A remote attacker can exploit the...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23152)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Word 2016 Remote Code Execution Vulnerability (KB4461504)

This host is missing an important security update according to Microsoft KB4461504 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23153)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23151)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Security Update for Microsoft Office (November 2018) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in...

Microsoft PowerShell Remote Code Execution Vulnerability

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could execute malicious code on a vulnerable system. To exploit the vulnerability, an attacker must send a specially crafted file to a...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

Debian DLA-1574-1 : imagemagick security update

CVE-2018-18025 Fix for heap-based buffer over-read which can result in a denial of service via a crafted file. For Debian 8 'Jessie', this problem has been fixed in version 8:6.8.9.9-5+deb8u15. We recommend that you upgrade your imagemagick packages. NOTE: Tenable Network Security has extracted t...

Updated audiofile packages fix security vulnerabilities

A NULL pointer dereference in modules/ModuleState.cpp:ModuleState::setup allows for denial of service via crafted file CVE-2018-13440. A Heap-based buffer overflow was found in Expand3To4Module::run when running sfconvert CVE-2018-17095...

CVE-2018-19128

CVE-2018-19128 describes a heap-based buffer over-read in Libav 12.3, specifically in decode_frame (libavcodec/lcldec.c), enabling denial-of-service via a crafted AVI file. The connected sources consistently identify the affected component as Libav’s libavcodec/lcldec.c and confirm the vulnerabil...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2018-26093)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2018-26094)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

DEBIAN-CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-19105

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...

Code injection

LibreCAD 2.1.3 allows remote attackers to cause a denial of service 0x89C04589 write access violation and application crash or possibly have unspecified other impact via a crafted file...