17082 matches found
CVE-2018-18223
Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash...
CVE-2018-18224
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...
CVE-2018-18224
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...
Design/Logic Flaw
The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B does not perform origin checks on URLs that the camera's web interface redirects a user to. This can be leveraged to send a user to an unexpected endpoint...
Design/Logic Flaw
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...
CVE-2018-18223
Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash...
CVE-2018-18223
The CVE-2018-18223 entry affects Open Design Alliance Drawings SDK 2019Update1, with a vulnerability during reading of malformed files that can disclose sensitive information from process memory or cause a crash. The connected sources provide concrete details (affected component and impact) but d...
CVE-2018-18224
CVE-2018-18224 affects Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms, enabling reading past/before buffer boundaries and potential information leakage or crashes. Connected IBM docs tie this to Rational DOORS Next Generation versions and provide a remediation: upgrade Rat...
Design/Logic Flaw
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...
Design/Logic Flaw
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
Design/Logic Flaw
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mtrand unsafely, resulting in predictable database backup file locations...
Design/Logic Flaw
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird 52.9...
Design/Logic Flaw
An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI...
Oracle Open Design Alliance Drawings SDK Buffer Overflow Vulnerability (CNVD-2019-37385)
The Open Design Alliance Drawings SDK is a software development kit SDK for .dwg and .dgn interoperability. A buffer overflow vulnerability exists in Oracle Open Design Alliance Drawings SDK. An attacker could exploit this vulnerability to obtain sensitive information in process memory or cause a...
Oracle Open Design Alliance Drawings SDK Buffer Overflow Vulnerability
The Open Design Alliance Drawings SDK is a software development kit SDK for .dwg and .dgn interoperability. A buffer overflow vulnerability exists in Oracle Open Design Alliance Drawings SDK. An attacker could exploit this vulnerability to obtain sensitive information in process memory or cause a...
Design/Logic Flaw
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter...
Design/Logic Flaw
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...
It will take more than web pages that load faster to boost holiday conversion
When designing websites to meet peak traffic demands, it is vital to look beyond basic metrics such as page load speed. Providing visual content optimized for both desktop and mobile devices, and combating security threats will help you drive traffic and improve conversion rates during the holida...
Design/Logic Flaw
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access...