9837 matches found
CVE-2019-18197
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be...
Amazon FreeRTOS for AWS Input Validation Error Vulnerability
Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An input validation error vulnerability exists in Amazon FreeRTOS v1.4.8 and earlier versions for AWS. The vulnerability stems from the program not checking the length of prvProcessReceivedPublish. An attacke...
DEBIAN-CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
UBUNTU-CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
Design/Logic Flaw
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...
CVE-2019-18786
In CVE-2019-18786, the Linux kernel up to version 5.3.8 contains an uninitialized f->fmt.sdr.reserved in rcar_drif_g_fmt_sdr_cap (drivers/media/platform/rcar_drif.c), enabling an information disclosure (memory disclosure) vulnerability. Connected advisories (Unity Nessus plugins) restate that ...
Mozilla Firefox ESR < 24.8 Multiple Vulnerabilities
Binary data 701247.prm...
webkitgtk: Out-of-bounds read leading to memory disclosure
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...
php: Buffer over-read in PHAR reading functions
In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...
php: Heap-based buffer over-read in PHAR reading functions
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...
Nokogiri gem, via libxslt, is affected by multiple vulnerabilities
Nokogiri v1.10.5 has been released. This is a security release. It addresses three CVEs in upstream libxml2, for which details are below. If you're using your distro's system libraries, rather than Nokogiri's vendored libraries, there's no security need to upgrade at this time, though you may wan...
LibVNC Memory Disclosure Vulnerability
LibVNC is a cross-platform C library that enables you to easily implement VNC server or client functionality in your security applications. A memory leak vulnerability exists in the VNC server code in versions prior to LibVNC d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. An attacker could exploit thi...
ALPINE-CVE-2019-15681
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak CWE-655 in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. Thi...