11824 matches found
The vulnerability in the JSSE component of Oracle Java SE, Java SE Embedded, and Jrockit software platforms allows attackers to gain unauthorized access to data or cause partial service interruptions.
The vulnerability of the JSE component in Oracle Java SE, Java SE Embedded, and Jrockit software platforms is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to data or cause a partial service failure using...
CVE-2019-7698
An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...
CVE-2019-7697
An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service program crash, as demonstrated by mp42hls...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary A remote code execution vulnerability exists because of the manner in which the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests. To...
Description of the security update for the Jet Database Engine remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the Jet Database Engine remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine incorrectly handles objects in memory. To learn more...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine incorrectly handles objects in memory. To learn more about the vulnerabilit...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary An information disclosure vulnerability exists when the Windows kernel incorrectly handles objects in memory. To learn more about the vulnerability, see...
Description of the security update for vulnerabilities in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for vulnerabilities in Windows Embedded POSReady 2009: February 12, 2019 Summary This security update addresses the following vulnerabilities: An elevation of privilege vulnerability exists when Windows incorrectly handles calls to Win32k.sys. An elevation of...
Ubuntu: Security Advisory (USN-3883-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: February 12, 2019 Summary An information disclosure vulnerability exists when the Human Interface Devices HID component incorrectly handles objects in memory. To learn more about the...
Ubuntu 14.04 LTS / 16.04 LTS : LibreOffice vulnerabilities (USN-3883-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3883-1 advisory. It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted...
USN-3883-1 libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. CVE-2018-10119, CVE-2018-10120, CVE-2018-11790 It was discovere...
The vulnerability in the Serviceability component of Java SE and Java SE Embedded programming platforms allows a perpetrator to gain unauthorized access to protected data.
The vulnerability of the Serviceability component in Java SE and Java SE Embedded software platforms is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data...
CVE-2019-6984
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-After-Free or Type Confusion and crash during handling of certain PDF files that embed specifically crafted 3D content, due to the use of a wild pointer...
Phishing Campaign Delivers Nasty Ransomware, Credential-Theft Two-Punch
An array of phishing emails harboring Word attachments with embedded macros have been infecting systems with a deadly malware and ransomware duo. The campaign, spotted by researchers at Carbon Black, has hit infected systems with a lethal attack combination that harvests credentials, gathers syst...
The vulnerability of the Hotspot component in Java SE, Java SE Embedded, and Jrockit software platforms allows a hacker to gain full control over the application.
The vulnerability of the Hotspot component in Java SE and Java SE Embedded software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application...
The vulnerability of Java SE, Java SE Embedded, and JRockit software platforms lies in their lack of access control mechanisms, allowing attackers to gain full control over the application.
The vulnerability of the JNDI component in Java SE, Java SE Embedded, and Jrockit programs is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application...
UBUNTU-CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
LAquis SCADA LGX Report File Write Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Router exploitation of the Stack Overflow entry a-vulnerability warning-the black bar safety net
MIPS instruction set is mainly used in some embedded IOT devices, such as Router, camera. To these devices for binary vulnerability mining you need to have the MIPS to have a certain familiar. The MIPS instruction set of Stack Overflow and the x86 instruction set is different, so the exploits is...