CVE-2019-12529

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

CVE-2019-12817

arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected...

SHEKAR Technology Endoscope Buffer Overflow Vulnerability

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A buffer overflow vulnerability exists in SHEKAR Technology Endoscope. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data...

The vulnerability of the microprogrammed logic controller Modicon, related to errors in buffer boundary control in memory, allows a intruder to cause a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in buffer boundary control in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted Modbus packet...

Remote code execution

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'...

CVE-2019-1010 Windows GDI Information Disclosure Vulnerability

...

CVE-2019-5305

CVE-2019-5305 affects the image processing module on some Huawei Mate 10 devices (before ALP-L29 9.0.0.159). The root cause is a memory double-free vulnerability that can be triggered when a user installs a malicious app and it calls a specific API, potentially leading to a system crash. Public d...

Memory Out-of-Bounds Write Vulnerability in CAJ Reading Tool

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds write vulnerability exists in the CAJ reader tool when parsing malformed CAJ documents. The vulnerability is caused due to the program failing to properly handle incorrect...

Memory Out-of-Bounds Access Vulnerability in CAJ Reading Tool

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds access vulnerability exists in the CAJ Reader tool when parsing malformed CAJ documents. The vulnerability is due to the program using wild pointers for memory reads when...

Memory out-of-bounds access vulnerability in CAJ reading tool (CNVD-2019-19617)

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds access vulnerability exists in the CAJ reader tool when parsing malformed CAJ documents. An attacker can exploit this vulnerability to cause a denial of service attack...

The vulnerability of the McAfee Agent client component, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code or cause service failure.

The vulnerability of the McAfee Agent client component is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending specially crafted HTTP requests...

Remote Code Execution (RCE)

ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-089...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882...

CVE-2019-11833

The CVE-2019-11833 vulnerability affects the ext4 filesystem implementation in the Linux kernel (extents.c) where the code path for an extent tree block does not zero out an unused memory region. This could allow a local attacker to read uninitialized kernel memory and disclose information. The i...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-18558

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that...

CVE-2018-18512

CVE-2018-18512 is a use-after-free vulnerability in Thunderbird triggered while playing a sound notification. The memory holding the sound data is freed while playback continues asynchronously, enabling potential crashes. Affected products: Thunderbird versions prior to 60.5. Root cause: use-afte...

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

KLA11735 Memory vulnerability in Opera

Memory vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Changelog for Opera 60 1https://blogs.opera.com/desktop/changelog-for-60/b3255.56 Changelog for Opera 60...