2011 matches found
Privilege Escalation
Red Hat JBoss Enterprise Application Platform is vulnerable to privilege escalation vulnerability. A local authenticated attacker could exploit unsafe file handling in jboss init script which would result in local privilege escalation...
EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1543)
According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize functio...
PT-2019-2171 · Microsoft · Windows Error Reporting +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Error Reporting WER affected versions not specified Description: An elevation of privilege issue exists in the way Windows Error Reporting WER handles files. This vulnerability is related to insufficient access restrictions ...
VulnCheck KEV: CVE-2019-0863
Microsoft Windows Error Reporting WER contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode...
Heap-based Buffer Overflow
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interprete...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interprete...
Improper Input Validation
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interprete...
Sensitive Information Disclosure
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...
Integer overflow
DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PhotoShop file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
USN-3922-2 php5 vulnerabilities
USN-3922-1 fixed vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 14.04 LTS. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2019-9022 It was discovered that PHP incorrectl...
Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2019-12138)
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacker...
OPENSUSE-SU-2019:1237-1 Security update for tar
This update for tar fixes the following issues: Security issues fixed: - CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in paxdecodeheader bsc1130496. - CVE-2018-20482: Fixed a denial of service when the '--sparse' option mishandles file...
PT-2019-18309 · Foxit · Foxit Studio Photo
Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...
openSUSE Security Update : dovecot23 (openSUSE-2019-1212)
This update for dovecot23 fixes the following issue : Security issue fixed : - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C...
Security update for dovecot23 (moderate)
openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2019:1212-1 Rating: moderate References: 1130116 Cross-References: CVE-2019-7524 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for dovecot...
CVE-2019-0801
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update...
openSUSE Security Update : nextcloud (openSUSE-2019-640)
This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...
Drupal File file_create_filename Persistent Cross-Site Scripting Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Drupal. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...
The vulnerability of Visual Studio Code’s source editor, related to a bug in file handling after opening a project, allows attackers to modify file access rights and execute arbitrary code.
The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to modify file access rights and execute arbitrary code...