8980 matches found
SMTP end-of-response out-of-bounds read
libcurl contains a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtpendofresp is not null-terminated and contains no character ending the parsed number, and len is set to 5, then the strtol call reads beyond the allocated buffer. The read...
CURL-CVE-2019-3823 SMTP end-of-response out-of-bounds read
libcurl contains a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtpendofresp is not null-terminated and contains no character ending the parsed number, and len is set to 5, then the strtol call reads beyond the allocated buffer. The read...
Debian DLA-1657-1 : debian-security-support enigmail end of life
debian-security-support, the Debian security support coverage checker, has been updated in jessie. This marks the end of life of the Enigmail package in jessie. After many months of work to try backporting the various changes and fixes required to ensure a secure Enigmail package compatible with...
[SECURITY] [DLA-1657-1] debian-security-support enigmail end of life
Package : debian-security-support Version : 2019.02.01deb8u1 debian-security-support, the Debian security support coverage checker, has been updated in jessie. This marks the end of life of the Enigmail package in jessie. After many months of work to try backporting the various changes and fixes...
CVE-2018-11790
When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation...
CVE-2018-11790
CVE-2018-11790 affects Apache OpenOffice 4.1.5 and earlier. The flaw is an arithmetic overflow in a string-length calculation when loading a document with an end-of-line termination smaller than the OS uses, triggered by handling virtual tables. Exploitation details are not explicitly provided in...
PayPal: Stored XSS on https://paypal.com/signin via cache poisoning
Due to a configuration in frontend, caching servers, it was possible for a researcher to use request smuggling to convert a page request into a cached redirect. If the cached redirect were accessed by a legitimate user, an attacker's content would be rendered instead of the requested page. While...
The Pitfalls of Facebook Merging Messenger, Instagram, and WhatsApp Chats
Facebook's effort to combine its major chat platforms could create minefields for users who rely on end-to-end encryption...
CVE-2018-17692
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Shop7z Online Shopping System Fashion Edition Frontend Sh***.asp File SQL Injection Vulnerability
Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability...
January 17, 2019—KB4480977 (OS Build 14393.2759)
None None...
Design/Logic Flaw
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...
Reminder: Microsoft to end support for Windows 7 in 1-year from today
A new reminder for those who are still holding on to the Windows 7 operating system—you have one year left until Microsoft ends support for its 9-year-old operating system. So it's time for you to upgrade your OS and say goodbye to Windows 7, as its five years of extended support will end on...
Reminder: Microsoft to end support for Windows 7 in 1-year from today
A new reminder for those who are still holding on to the Windows 7 operating system—you have one year left until Microsoft ends support for its 9-year-old operating system. So it's time for you to upgrade your OS and say goodbye to Windows 7, as its five years of extended support will end on...
Alex Stamos on Content Moderation and Security
Former Facebook CISO Alex Stamos argues that increasing political pressure on social media platforms to moderate content will give them a pretext to turn all end-to-end crypto off -- which would be more profitable for them and bad for society. If we ask tech companies to fix ancient societal ills...
Cross-site Scripting (XSS)
pki-util is vulnerable to cross-site scripting XSS attacks. The vulnerability exists through multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecifie...
January 15, 2019—KB4480959 (OS Build 15063.1596)
None None...
Mozilla Kills Default Support for Adobe Flash in Firefox 69
Mozilla is disabling default support for Adobe’s Flash Player plugin in the latest upcoming version of its FireFox browser, marking the latest step in end-of-life for the infamous plugin. The disabled default support means that Firefox users will now be required to manually enable Adobe Flash in...
Logic flaw vulnerability in yershop open source online store system (CNVD-2019-04592)
yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop open source online store system there is a logic flaw vulnerability , the vulnerability...