11820 matches found
OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...
Security Bulletin: Multiple vulnerabilities in Oracle Java SE affect IBM Spectrum Protect Plus (CVE-2018-3136, CVE-2018-3139, CVE-2018-3149, CVE-2018-3169, CVE-2018-3180, CVE-2018-3183, CVE-2018-3214, CVE-2018-13785)
Summary There are multiple vulnerabilities in Oracle Java SE which is used by IBM Spectrum Protect™ Plus. These issues were disclosed as part of the Oracle Critical Patch Update CPU in October 2018. Vulnerability Details CVEID: CVE-2018-3136 DESCRIPTION: An unspecified vulnerability in Oracle Jav...
Adobe Acrobat XPS JPEG Out of Bounds Read (CVE-2018-4889)
An out of bounds read vulnerability has been reported in XPS component of Adobe Acrobat. The vulnerability is due to improper parsing of an embedded JPEG image in an XPS document. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
MatrixSSL < 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates Vulnerability
MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates I happened to notice that a public X.509 certificate testcase for CVE-2014-1569 caused a stack buffer overflow in MatrixSSL. I cleaned up the testcase a bit, to make a better demonstration. You can test it with the certValidate...
TROMMEL - Sift Through Embedded Device Files To Identify Potential Vulnerable Indicators
TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell scripts w...
Lexmark Printer Shortcut Integrity Vulnerability (CVE-2019-6489)
Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices allow remote attackers to erase stored shortcuts. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
The vulnerability of the ImageIO component (libjpeg) in Oracle Java SE and Java SE Embedded software platforms allows a hacker to cause a system failure.
The vulnerability of the ImageIO component libjpeg in Oracle Java SE and Java SE Embedded software is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Sound component in Oracle Java SE, Java SE Embedded, and JRockit software platforms allows attackers to trigger a service failure.
The vulnerability of the Sound component in Oracle Java SE, Java SE Embedded, and JRockit software platforms is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...
USB Cable with Embedded Wi-Fi Controller
It's only a prototype, but this USB cable has an embedded Wi-Fi controller. Whoever controls that Wi-Fi connection can remotely execute commands on the attached computer...
2019-02 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4487038)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2019-02 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x64-based Systems (KB4487038)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2019-02 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x86-based Systems (KB4487025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2019-02 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x64-based Systems (KB4487025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2019-02 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard (KB4487079)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2019-02 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard for x64 (KB4487079)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Description of the security update for Excel Viewer 2007: February 12, 2019
Description of the security update for Excel Viewer 2007: February 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists when Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
The vulnerability in the JSSE component of Oracle Java SE, Java SE Embedded, and Jrockit software platforms allows attackers to gain unauthorized access to data or cause partial service interruptions.
The vulnerability of the JSE component in Oracle Java SE, Java SE Embedded, and Jrockit software platforms is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to data or cause a partial service failure using...
CVE-2019-7698
An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...
CVE-2019-7697
An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service program crash, as demonstrated by mp42hls...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary A remote code execution vulnerability exists because of the manner in which the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests. To...