Design/Logic Flaw

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

Design/Logic Flaw

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

CVE-2018-15998

CVE-2018-15998 affects Adobe Acrobat and Reader with a buffer errors vulnerability that could lead to arbitrary code execution. Publicly listed affected versions include 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2017.011.30106 and earlier, 2017.011.30105 and earlier, and 2015.006.30...

CVE-2018-15987

Adobe Acrobat and Reader are affected by CVE-2018-15987 due to a buffer errors vulnerability in multiple versions: 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2017.011.30106 and earlier, 2017.011.30105 and earlier, 2015.006.30457 and earlier, and 2015.006.30456 and earlier. Successful...

CVE-2018-15998

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

CVE-2018-15987

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

Galaktika ERP DoS

The vulnerability of the galsrv.exe process in the Enterprise Resource Management System “Galaktika ERP” is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures for DCOM-based technologies by quickly sending specially crafted...

PT-2019-1344

Name of the Vulnerable Software and Affected Versions glibc versions through 2.28 Description The issue is related to the string component in the GNU C Library, specifically when running on the x32 architecture. It incorrectly attempts to use a 64-bit register for size t in assembly codes, which...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution attacks. The vulnerability exists as the NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have...

Denial Of Service (DoS)

OpenStack Compute nova is vulnerable to denial of service DoS attack. It is possible because it does not restrict qemu-ing calls to consume as much as 4 GB of RAM on the compute host by uploading a malicious image, leading to out-of-memory errors and negatively affect other running tenant instanc...

Denial Of Service (DoS)

bind-dyndb-ldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the handleconnectionerror function in ldaphelper.c does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service through a non-alphabet character in the base DN in ...

Microsoft Windows Codecs Information Disclosure

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted image file...

CVE-2018-1000872

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

Internet Bug Bounty: Use after free and out of bounds read in xmlrpc_decode()

Malformed input can lead to use after free and out of bounds memory errors. This has been fixed with the latest updates of PHP 7.1.26/7.2.14/7.3.1. Note: I reported those as separate bugs to PHP, but they had the same underlying bug and were fixed by the same commit. The release notes only mentio...

Windows Kernel Information Disclosure

The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

Microsoft Graphics Component Disclosure

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office programs and Office 365, the Microsoft Office Compatibility Pack, the Microsoft PowerPoint Viewer, the Microsoft Office Word Viewer, and the Microsoft Windows operating system is related to objec...

.NET Core PowerShell Core Authentication Disclosure

The vulnerability of the .NET Core runtime and the PowerShell Core automation framework is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

Microsoft Windows Filter Manager Code Execution

The vulnerability of the Filter Manager component of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code and gain control over the vulnerable system by deleting a specific file...

Windows Privilege Escalation

The vulnerability of the Windows operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges through a specially created application...

Cisco Adaptive Security Appliance Privilege Escalation

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using specially crafted HTTP requests...