998 matches found
Microsoft.NET Framework Code Execution
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
Microsoft Internet Information Services DoS
The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
PT-2019-2378
Name of the Vulnerable Software and Affected Versions Microsoft IIS Server affected versions not specified Description A denial of service issue exists in Microsoft IIS Server due to improper handling of requests by the optional request filtering feature. This can be exploited by a remote attacke...
CVE-2018-8035
This CVE concerns Apache UIMA DUCC (
(Pwn2Own) Oracle VirtualBox OHCI Integer Overflow Information Disclosure Vulnerability
Workstation This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
Microsoft Office Data Processing Code Execution
The vulnerability of the Microsoft Office package is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...
XFS Heap Buffer Overflow DoS
The vulnerability of the xfsattrshortformaddname function in the XFS file system implementation of Linux operating systems is related to incorrect data processing. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux cdrom_ioctl_drive_status() Unauthenticated Access
The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft Edge Data Compromise
The vulnerability of Microsoft Edge is related to errors in processing service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information by using a specially crafted web page...
ChakraCore JavaScript Disclosure
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Open Positioner: my new project for tracking IT and security jobs
The idea of my new project is to retrieve the data from job-searching websites and provide better filtering, searching and visualization. I think for the most people who read this, searching for a job in Internet is a pretty common activity. Even if you are not going to change job right now, it...
ACD Systems Canvas Draw 4 FillSpan Out of Bounds Write Code Execution Vulnerability
Summary An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...
SAP Business Process Automation Access Files
The vulnerability of the SAP Business Process Automation platform is related to the improper processing of address data received from users. Exploiting this vulnerability allows a malicious actor to view arbitrary files on the server, including system files, as well as gain access to critical...
SAP NetWeaver System Landscape Directory Information Disclosure
The vulnerability of the software for processing data related to the software and hardware components of the SAP NetWeaver system landscape directory is related to security vulnerabilities. Exploiting this vulnerability allows an attacker to obtain information about the internal network by scanni...
Picketlink StaxParserUtil Disclosure
The vulnerability of the StaxParserUtil class in Picketlink software for managing security and application identification in Java applications is related to deficiencies in the processing of input data during SAML message analysis. Exploiting this vulnerability allows a malicious actor to disclos...
Junos DoS
The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...
Google fined $57 million by France for lack of transparency and consent
The French data protection watchdog CNIL has issued its first fine of €50 million around $57 million under the European Union's new General Data Protection Regulation GDPR law that came into force in May last year. The fine has been levied on Google for "lack of transparency, inadequate informati...
modulemd uses an unsafe function for processing externally provided data
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...
