CVE-2017-18589: Improper Input Validation

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...

Denial Of Service (Dos)

ceph is vulnerable to denial of service. There is no defined limit for ListBucket max-keys in the RGW codebase, allowing users to crash the application against OMAPs holding bucket indices...

ceph: ListBucket max-keys has no defined limit in the RGW codebase

A flaw was found in the way the ListBucket function max-keys has no defined limit in the RGW codebase. An authenticated ceph RGW user can cause a denial of service attack against OMAPs holding bucked indices...

ceph: ListBucket max-keys has no defined limit in the RGW codebase

A flaw was found in the way the ListBucket function max-keys has no defined limit in the RGW codebase. An authenticated ceph RGW user can cause a denial of service attack against OMAPs holding bucked indices...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2105-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

max-holder.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-923433 Security Researcher badmaxx Helped patch 1677 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting max-holder.com website and i...

Intel Turbo Boost Max Technology 3.0 driver Permission License and Access Control Issues Vulnerability

Intel Turbo Boost Max Technology 3.0 driver is an Intel Turbo Boost Max Technology 3.0 driver from Intel Corporation. A security vulnerability exists in Intel Turbo Boost Max Technology 3.0 driver 1.0.0.1035 and earlier versions. A local attacker can exploit this vulnerability to elevate privileg...

Edraw Max Heap Corruption Vulnerability

Edraw Max Billion Diagrams is a 2D business and technical diagramming software. The software can be used to create flowcharts, organizational charts, mind maps, network diagrams, floor plans, workflow diagrams, business diagrams and engineering drawings. A security vulnerability exists in Edraw M...

CVE-2019-12897

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12897

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

Heap overflow

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

Null pointer dereference

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2019-12897

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2019-12897

CVE-2019-12897 affects Edraw Max 7.9.3. The vulnerability is described as a Read Access Violation at the Instruction Pointer triggered after a call from ObjectModule!Paint::Clear+0x... (address provided). Connected sources corroborate this description across multiple feeds; no additional technica...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12896

Summary: CVE-2019-12896 affects Edraw Max 7.9.3 and involves a heap corruption vulnerability. The specific trigger is described as corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x1a77. Several connected sources (Red Hat, CNVD, NVD entry) confirm the software and version, with the issue iden...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...