libyal libpff Information Disclosure Vulnerability

libyal libpff is a library for accessing Personal Folder Files PFF and Offline Folder Files OFF. A security vulnerability exists in the 'libpffnametoidmapentryread' function in the libpffnametoidmap.c file in libyal libpff 2018-04-28 and earlier versions. A remote attacker can exploit this...

CVE-2017-7822

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox 56...

CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2017-5389

WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user...

flash-plugin: Information Disclosure vulnerabilities (APSB18-19)

Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-4240

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted...

CVE-2018-0318

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...

CloudBees Jenkins GitHub Pull Request Builder Plugin Information Disclosure Vulnerability

CloudBees Jenkins is a set of Java-based continuous integration tools , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks.GitHub Pull Request Builder Plugin is used in one of the automatic update of the GitHub code plugin . An information...

Bouncy Castle JCE Provider Information Disclosure Vulnerability

Bouncy Castle JCE Provider is a Java-based encryption package. A security vulnerability exists in the generation of DSA signatures in Bouncy Castle JCE Provider 1.55 and earlier versions. An attacker can exploit this vulnerability to obtain information about the k-value of the signature, and thus...

Pixelpost Cross-Site Scripting Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A cross-site scripting vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2018-4549

Name of the Vulnerable Software and Affected Versions jsonwebtoken versions 4.2.1 and earlier Description The issue allows an attacker to bypass verification when a token digitally signed with an asymmetric key is sent, but the attacker instead sends a token digitally signed with a symmetric...

OpenCart Arbitrary Code Execution Vulnerability

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A security vulnerability exists in the 'Program Extension Loading' feature in OpenCart 3.0.2.0 and earlier versions. An attacker can exploi...

MuPDF Denial of Service Vulnerability (CNVD-2018-10366)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF 1.12.0 and earlier versions. An attacker can exploit this vulnerability with specially crafted files to cause a denial of service crash or affect program flow...

Artifex MuPDF Memory Misreference Vulnerability

Artifex MuPDF is the United States Artifex Software, Inc. of a free, lightweight PDF reader. PDF parser is one of the PDF parser. Artifex MuPDF 1.12.0 and previous versions of the PDF parser memory misreference vulnerability. An attacker can exploit this vulnerability to execute arbitrary code,...

CVE-2018-4932

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Xxe

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure...

Cross site scripting

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-4926

Adobe Digital Editions versions 4.5.7 and below have an exploitable Stack Overflow vulnerability. Successful exploitation could lead to information disclosure...

Adobe Creative Cloud Security Restriction Bypass Vulnerability

Adobe Creative Cloud is a cloud-based suite of software that includes graphic design, movie editing, and web development applications. A security restriction bypass vulnerability exists in Adobe Creative Cloud 4.4.1.298 and earlier versions. An attacker can exploit the vulnerability to bypass...

Lantech IDS 2102 Input Validation Vulnerability

The Lantech IDS 2102 is an Ethernet device server. An input validation vulnerability exists in the Lantech IDS 2102 version 2.0 and earlier. A remote attacker could exploit this vulnerability by constructing malicious input to execute arbitrary code...