Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2020-33430)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2020-33431)

Microsoft Windows is an operating system for personal devices from Microsoft.Windows Jet Database Engine is one of the database engines. A remote code execution vulnerability exists in Microsoft Windows Jet Database Engine, which arises from the program's failure to properly handle objects in...

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2020-33432)

Microsoft Windows is an operating system for personal devices from Microsoft.Windows Jet Database Engine is one of the database engines. A remote code execution vulnerability exists in Microsoft Windows Jet Database Engine, which arises from the program's failure to properly handle objects in...

Apache Tika Memory Overflow Vulnerability (CNVD-2020-33326)

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

RE2C Buffer Overflow Vulnerability

re2c is an open source language generator for C and C++. A buffer overflow vulnerability exists in the 'Scanner :: fill' function of the Scanner.cc file in version 1.3 of re2c, which stems from the program's failure to properly perform boundary checks. A remote attacker can exploit this...

Microsoft Windows Graphics Components Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. A remote code execution vulnerabili...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

Intel Binary Configuration Tool Code Issue Vulnerability

Intel Binary Configuration Tool is an Intel utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in the installer in the Intel Binary Configuration Tool for Windows-based platforms. The vulnerability can be...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

MS15-110: Description of the security update for Excel 2016: October 13, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To...

MS15-046: Description of the security update for SharePoint Server 2013 Word Automation Services: May 12, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...

ImageMagick: infinite loop in coders/bmp.c

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

ImageMagick: Use after free in ReadMATImage in coders/mat.c

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-32860)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system with the help of specially crafted files...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-33797)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system with the help of specially crafted files...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-33798)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by remote attackers to execute arbitrary code on the system with the help of specially...

CVE-2020-9759

CVE-2020-9759 affects WeeChat (IRC client). A crafted IRC message 352 (who) can cause a crash, per multiple advisories (Debian DLA-2157-1, GLSA-202003-51, USN-5258-1). Root cause: malformed channel/ IRC message handling leading to a crash; impact is denial of service via client crash. Remediation...

DEBIAN-CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

DEBIAN-CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...