Espruino Out-of-Bounds Read Vulnerability

Espruino is a JavaScript interpreter for use in microcontrollers. A security vulnerability exists in Espruino versions prior to 1.98 that stems from a failure to validate the height of the libs/graphics/jswrapgraphics.c file when analyzing the syntax. An attacker can exploit this vulnerability to...

Espruino Buffer Overflow Vulnerability

Espruino is a JavaScript interpreter for use in microcontrollers. A stack overflow vulnerability exists in versions of Espruino prior to 1.99, which stems from the program's lack of detection of stack exhaustion conditions. An attacker can exploit this vulnerability to cause a denial of service...

Espruino Buffer Overflow Vulnerability (CNVD-2018-10887)

Espruino is a JavaScript interpreter for use in microcontrollers. A stack buffer overflow vulnerability exists in the jsvar.c file in versions of Espruino prior to 1.99, which stems from a program used to '\detect 0' detecting the wrong array element. An attacker can exploit this vulnerability to...

The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

Libmobi Information Disclosure Vulnerability (CNVD-2018-10877)

Libmobi is a C-based language for processing Kindle MOBI format e-book document library . A security vulnerability exists in the 'mobiparsemobiheader' function of the read.c file in Libmobi version 0.3. A remote attacker can exploit this vulnerability to disclose information heap-based buffer...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10642)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'mkdtrimline' function in the mkdio.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10852)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'isfootnote' function in the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based...

DISCOUNT Denial of Service Vulnerability

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'islist' function of the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buff...

MuPDF Memory Disclosure Vulnerability

Artifex MuPDF is the United States Artifex Software, Inc. of a free, lightweight PDF reader. PDF parser is one of the PDF parser. Artifex MuPDF 1.12.0 and previous versions of the PDF parser has a security vulnerability. An attacker can exploit this vulnerability to cause a denial of service memo...

MuPDF Denial of Service Vulnerability (CNVD-2018-10365)

Artifex MuPDF is the United States Artifex Software, Inc. of a free, lightweight PDF reader. PDF parser is one of the PDF parser. Artifex MuPDF 1.12.0 and previous versions of the PDF parser has a security vulnerability. An attacker can exploit this vulnerability to cause a denial of service...

MuPDF Denial of Service Vulnerability (CNVD-2018-10366)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF 1.12.0 and earlier versions. An attacker can exploit this vulnerability with specially crafted files to cause a denial of service crash or affect program flow...

DEBIAN-CVE-2018-1000040

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

DEBIAN-CVE-2018-1000037

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

DEBIAN-CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

DEBIAN-CVE-2018-1000038

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...

UPX denial of service vulnerability

UPX is an executable file compressor. A security vulnerability exists in the 'PackLinuxElf64::unpack' function of the plxelf.cpp file in UPX version 3.95. A remote attacker can exploit this vulnerability to cause a denial of service double release with the help of specially crafted files...

ImageMagick Infinite Loop Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. An infinite loop vulnerability exists in the ReadTXTImage function in coders/txt.c in ImageMagick 7.0.7-16 Q16 x8664 2017-12-22. An attacker can exploit this...

CVE-2018-8843

Rockwell Automation Arena versions 15.10.00 and prior contains a use after free vulnerability caused by processing specially crafted Arena Simulation Software files that may cause the software application to crash, potentially losing any unsaved data...

ModbusPal XML External Entity Injection Vulnerability

ModbusPal is a MODBUS simulator written in Java with a replicated MODBUS environment. An XML external entity injection vulnerability exists in ModbusPal version 1.6b. A remote attacker can exploit this vulnerability by sending a specially crafted .xmpp or .xmpa file to the user to obtain the...