3346 matches found
CVE-2019-16265
CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow...
CVE-2019-8194
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
PYSEC-2019-241
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...
CVE-2019-17452
Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump...
CVE-2019-17262
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0...
CVE-2019-3738
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key...
CVE-2016-10946
The wp-d3 plugin before 2.4.1 for WordPress has CSRF...
The vulnerability of the OpenSSL library, related to errors in the certificate validation process, allows attackers to compromise the integrity of data.
The vulnerability of the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
UBUNTU-CVE-2019-15946
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...
CVE-2019-15837
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
CVE-2019-9932
Various Lexmark products have a Buffer Overflow issue 2 of 3...
CVE-2019-9930
Various Lexmark products have an Integer Overflow...
CVE-2019-15559
DianoxDragon Hawn before 2019-07-10 allows SQL injection...
CVE-2017-18578
The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...
CVE-2019-11603
A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root...
CVE-2016-10882
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...
PT-2019-7833 · Php · Php Jose Library
Name of the Vulnerable Software and Affected Versions: PHP JOSE Library versions prior to 2.2.1 Description: The issue allows for key confusion/algorithm substitution in the JWS component, resulting in the bypassing of signature verification via crafted tokens. Recommendations: For versions prior...
ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...
libopenmpt Input Validation Error Vulnerability (CNVD-2020-22391)
libopenmpt is a cross-platform C and C++ based audio library that decodes audio files into raw PCM audio streams. An input validation error vulnerability exists in libopenmpt. No details of the vulnerability are available at this time...