Open-Xchange: Two heap use-after-free errors in IMAP operations

Summary ======= We’ve found two heap use-after-free errors, one in lib-storage/index/index-storage.c: indexcopycachefields and one in lib-index/mail-index-sync-update.c: mailindexsyncrecordreal. Error 1: indexcopycachefields ---------------------------------------------- This error involves two...

Cisco IOS XE Info Disclosure

The vulnerability of the Cisco IOS XE operating system’s web interface is related to configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using a specially crafted request...

Linux Android sk_clone_lock Heap Buffer Overflow DoS

The vulnerability of the skclonelock function in Linux and Android operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Internet Explorer Script Handler Unauthorized Access

The vulnerability of Internet Explorer JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

IOleCvt Code Execution

The vulnerability of the IOleCvt interface in Windows operating systems is related to errors in displaying ASP pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dovecot Authentication Bypass

The vulnerability of the Dovecot mail server is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Microsoft Office Graphical Component Code Execution

The vulnerability of Microsoft Office’s graphical components is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Certificate Management Server DoS

The vulnerability of the Certificate Management Server CMS component in the NSS library set is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

JavaScript script handlers VBScript Windows Code Execution

The vulnerability of JavaScript and VBScript handlers in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

IBM Business Automation Workflow and IBM Business Process Manager Information Disclosure Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

McAfee Application and Change Control Blacklist Code Execution

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the “blacklist” mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on file execution and execute arbitrary code...

vRealize Log Insight Authentication Bypass

The vulnerability of the vRealize Log Insight log management tool is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Trusted Platform Module Cryptographic Processor

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...