814 matches found
The vulnerability of the Jenkins Script Security plugin, related to data processing errors, allows a hacker to execute arbitrary code.
The vulnerability of the Jenkins Script Security plugin is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Introducing EQR — The Need for Petabyte-Scale Real-Time Analysis
Making Fast Decisions from Lots of Data One of the most difficult things to solve for in the Security industry is scale. Security is essentially a big data problem—data that is dynamic, and variadic. You need to correlate lots of disparate data elements that contain dynamically changing parameter...
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment, related to data processing flaws, allows attackers to execute arbitrary code.
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2018-8035
This CVE concerns Apache UIMA DUCC (
(Pwn2Own) Oracle VirtualBox OHCI Integer Overflow Information Disclosure Vulnerability
WorkstationThis vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
The vulnerability of the Microsoft Office package, related to data processing errors, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Office package is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...
The vulnerability of the xfs_attr_shortform_addname function in the XFS file system implementation of Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the xfsattrshortformaddname function in the XFS file system implementation of Linux operating systems is related to incorrect data processing. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the cdrom_ioctl_drive_status() function in Linux operating systems, which allows a hacker to gain unauthorized access to protected information
The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of Microsoft Edge, related to errors in processing service data, allows attackers to compromise the confidentiality of protected information.
The vulnerability of Microsoft Edge is related to errors in processing service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information by using a specially crafted web page...
Open Positioner: my new project for tracking IT and security jobs
The idea of my new project is to retrieve the data from job-searching websites and provide better filtering, searching and visualization. I think for the most people who read this, searching for a job in Internet is a pretty common activity. Even if you are not going to change job right now, it...
ACD Systems Canvas Draw 4 FillSpan Out of Bounds Write Code Execution Vulnerability
Summary An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...
The vulnerability of SAP Business Process Automation platform, related to incorrect processing of address data, allows a hacker to access and view arbitrary files on the server.
The vulnerability of the SAP Business Process Automation platform is related to the improper processing of address data received from users. Exploiting this vulnerability allows a malicious actor to view arbitrary files on the server, including system files, as well as gain access to critical...
The vulnerability of the software for processing data related to the software-hardware components of the SAP NetWeaver System Landscape Directory allows a hacker to obtain information about the internal network.
The vulnerability of the software for processing data related to the software and hardware components of the SAP NetWeaver system landscape directory is related to security vulnerabilities. Exploiting this vulnerability allows an attacker to obtain information about the internal network by scanni...
The vulnerability in the StaxParserUtil class of Picketlink software for managing security and application identification in Java applications allows a perpetrator to disclose protected information.
The vulnerability of the StaxParserUtil class in Picketlink software for managing security and application identification in Java applications is related to deficiencies in the processing of input data during SAML message analysis. Exploiting this vulnerability allows a malicious actor to disclos...
The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.
The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...
Google fined $57 million by France for lack of transparency and consent
The French data protection watchdog CNIL has issued its first fine of €50 million around $57 million under the European Union's new General Data Protection Regulation GDPR law that came into force in May last year. The fine has been levied on Google for "lack of transparency, inadequate informati...
modulemd uses an unsafe function for processing externally provided data
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...
