freerdp: Out-of-bounds write in nsc_rle_decode() function

A flaw was found in freerdp in versions before 2.0.0-rc4. An out-of-bounds write of up to 4 bytes in the nscrledecode function results in a memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Teclib GLPI Competitive Conditions Issue Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A competitive conditions issue vulnerability exists in Teclib GLPI versions...

PT-2019-6134 · Bluez +2 · Bluez +2

Name of the Vulnerable Software and Affected Versions: BlueZ versions through 5.48 Description: A heap-based buffer overflow was discovered in the bluetoothd component of BlueZ. The issue is caused by the lack of size checks when appending data to the output buffer in the service attr req functio...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27273)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27290)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-27114)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

CVE-2018-13804

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2019-36177)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

PT-2018-3027 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by an integer overflow in the hidp process report function in the bluetooth component of the Linux kernel. This could lead to an out of bounds write with no additional execution privileges neede...

Oracle Fusion Middleware Unspecified Vulnerability in Fusion Middleware MapViewer Component

Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other functionality. analysis development toolkit. An unspecified vulnerability exists in the Oracle Fusion Middleware Fusion Middleware...

VirtualBox Denial of Service Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VirtualBox Privilege Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition

Summary Java SE issues disclosed in the Oracle January 2015 Critical Patch Update plus two additional vulnerabilities Vulnerability Details CVE IDs: CVE-2014-6549 CVE-2015-0408 CVE-2015-0412 CVE-2015-0395 CVE-2015-0403 CVE-2015-0406 CVE-2015-0410 CVE-2015-0407 CVE-2015-0400 CVE-2014-6587...

Security Bulletin: Multiple security vulnerabilities exist in the IBM SDK, Java Technology Edition provided with WebSphere DataPower XC10 Appliance

Summary Three security vulnerabilities were identified in the IBM® SDK, Java™ Technology Edition provided with WebSphere DataPower XC10 Appliance. Vulnerability Details CVEID: CVE-2014-0878 DESCRIPTION: A vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom...

The vulnerability of Qualcomm Service Request in the Android operating system, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Service Request component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-09064)

Java SE stands for Java Platform Standard Edition and is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. An unspecified vulnerability exists in the Libraries component of Oracle Java SE. An attacker could exploit this...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-09084)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Enterprise Management Console component of Oracle Hospitality Simphony. An attacker could exploit th...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-09063)

Java SE is the Java Platform Standard Edition, for the development and deployment of desktop, server and embedded devices and real-time environment of Java applications. An unspecified vulnerability exists in the Libraries component of Oracle Java SE. An attacker could exploit this vulnerability ...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2018-08444)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox. An attacker could explo...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2018-08440)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox. An attacker could explo...