CVE-2019-6750

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6747

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

GHSA-F7R3-P866-Q9QR ircdkit vulnerable to Denial of Service due to unhandled connection end event

Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service. Recommendation Upgrade to version 1.0.4...

ircdkit vulnerable to Denial of Service due to unhandled connection end event

Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service. Recommendation Upgrade to version 1.0.4...

May 28, 2019—KB4499162 (OS Build 15063.1839)

None None...

SQL Injection

Foreman is vulnerable to SQL injection. An input sanitization flaw in the id field in the dashboard controller allows remote unauthenticated attackers to perform SQL injection on the back end database...

Germany Talking about Banning End-to-End Encryption

Der Spiegel is reporting that the German Ministry for Internal Affairs is planning to require all Internet message services to provide plaintext messages on demand, basically outlawing strong end-to-end encryption. Anyone not complying will be blocked, although the article doesn't say how. Cory...

May 23, 2019—KB4499177 (OS Build 14393.2999)

None None...

May 21, 2019—KB4499183 (OS Build 17134.799)

None None...

May 19, 2019—KB4505052 (OS Build 14393.2972)

None None...

May 19, 2019—KB4505062 (OS Build 16299.1150)

None None...

May 19, 2019—KB4505055 (OS Build 15063.1808)

None None...

JDK: Read beyond the end of bytecode array causing JVM crash

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load...

Session Hijacking

Keycloak is vulnerable to session hijacking attacks. This allows the end user token access or id token JWT to be used as the session cookie for browser sessions for OIDC. An attacker could leverage this issue to gain unauthorized access to the affected application...

WhatsApp Zero-Day Exploited in Targeted Spyware Attacks

UPDATE WhatsApp is urging users to update as soon as possible, after a zero-day vulnerability found in its messaging platform was exploited by attackers who were able to inject spyware onto victims’ phones in targeted campaigns. First reported by the Financial Times, the popular messaging app...

May 14, 2019—KB4494440 (OS Build 14393.2969) - EXPIRED

None None...

JDK: Read beyond the end of bytecode array causing JVM crash

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load...

JDK: Read beyond the end of bytecode array causing JVM crash

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load...

JDK: Read beyond the end of bytecode array causing JVM crash

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load...