DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

Windows wlansvc.dll Code Execution

The vulnerability of the wlansvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created application...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

Cisco RV110W Wireless-N VPN Firewalls Device List Access

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

connection tool Parallel Port Segmentation Error DoS

The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

gtbl document editing Pointer Arithmetic DoS

The vulnerability of the gtbl document editing tool from the groff package is related to errors in pointer manipulation at address 0x0000000000409400. Exploiting this vulnerability could allow an attacker to cause a service failure by passing a specially crafted file as an argument to the command...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2019-1718)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8324 - rubygems: Escape sequence injection vulnerability in gem...

Squid Security Update Advisory (SQUID-2018:4)

Squid is prone to a cross-site scripting vulnerability to incorrect input handling when generating HTTPS response messages about TLS errors. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

DirectWrite Code Execution

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

DirectWrite Code Execution

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft.NET Framework Privilege Escalation

The vulnerability of the Microsoft.NET Framework software platform, as well as the Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation email messaging software, is related to implementation errors in authentication procedures. Exploiting this...

Palo Alto Networks PAN-OS Information Disclosure Vulnerability (CNVD-2019-23068)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An information disclosure vulnerability exists in Palo Alto Networks PAN-OS. to The vulnerability originates from an error in configuration or other errors in the operation of the network...

CVE-2019-13306

A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by...

Remote Code Execution (RCE)

fastjson is vulnerable to Remote Code Execution. The library has code logic errors that allow blacklist check bypass. An attacker is thus able to craft a malicious payload to execute arbitrary code during deserialization...