PT-2019-19010 · Hdf +3 · Hdf5 +3

Name of the Vulnerable Software and Affected Versions: HDF5 versions prior to 1.10.5 Description: A buffer overflow issue in the HDF5 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file. Recommendations: For versions...

chromium-browser: Use after free in PDFium

Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

The vulnerability of the software used to create 3D computer graphics in Blender relates to integer overflow during the processing of .blend files. This allows an attacker to execute code within the application context.

The vulnerability of Blender’s software for creating three-dimensional computer graphics is related to errors during the conversion of curves into polygons, which can lead to integer overflow. Exploiting this vulnerability allows an attacker to execute code within the application using a speciall...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

PT-2019-2944 · Cisco +1 · Cisco Webex Network Recording Player +2

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: The issue is related to improper validation of Advanced Recording...

CVE-2019-1648

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An...

LAquis SCADA LGX Report Ini WriteNumber Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted...

Privilege Escalation

gdb is vulnerable to privilege escalation attacks. The vulnerability exists as GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python...

Google Chrome PDFium Out-of-Bounds Memory Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 51.0.2704.63 previous version of PDFium security vulnerabilities, the vulnerability stems from the program failed to adequately verify the image...

Low: clamav

Issue Overview: An issue was discovered in kwajdreadheaders in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.CVE-2018-14681 An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in...

Updated discount packages fix security vulnerabilities

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file CVE-2018-11468. DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:isfootnote...

PT-2019-1119 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Windows Jet Database Engine component of the Windows operating system. This can be exploited by an attacker using a specially crafted file,...

DEBIAN-CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

libdoc buffer out-of-bounds read vulnerability (CNVD-2018-26648)

libdoc is a C library for extracting text from MicroSoft doc files. A heap buffer out-of-bounds read vulnerability exists in the 'processfile' function of the reader.c file in libdoc version 2017-10-23 and earlier, which can be exploited by an attacker to cause a denial of service application cra...

Libdoc Buffer Out-of-Bounds Read Vulnerability

libdoc is a C library for extracting text from MicroSoft doc files. A heap buffer out-of-bounds read vulnerability exists in the 'getlong' function of the numutils.c file in libdoc versions 2017-10-23 and earlier, which can be exploited by an attacker to cause a denial of service application cras...

UBUNTU-CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...