CVE-2018-6153

Removed by vendor...

CVE-2018-6126

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

PHP 7.0.x < 7.0.5 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.5. It is, therefore, affected by multiple vulnerabilities : - A buffer over-write condition exists in the finfoopen function due to improper validation of magic files. An unauthenticated, remote...

PHP 5.6.x < 5.6.20 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.20. It is, therefore, affected by multiple vulnerabilities : - A buffer over-write condition exists in the finfoopen function due to improper validation of magic files. An unauthenticated, remote...

SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2018:2647-1)

This update for nodejs4 fixes the following issues : Security issues fixed : CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 Upgrade to OpenSSL 1.0.2p, which fixed : - CVE-2018-0732: Client...

CVE-2018-20549

There is an illegal WRITE memory access at caca/file.c function cacafileread in libcaca 0.99.beta19...

CVE-2018-20545

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 4bpp data...

Libcaca Illegal Write Memory Access Vulnerability

libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the loadimage function in common-image.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2018-1426)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library CVE-2018-7568 - binutils: integer underflow...

PT-2018-14501

Name of the Vulnerable Software and Affected Versions ASUS Aura Sync versions 1.07.22 and earlier Description The issue concerns the GLCKIo low-level driver in ASUS Aura Sync, which allows writing an arbitrary DWORD to an arbitrary address. Recommendations For versions 1.07.22 and earlier, update...

Important: postgresql95

Issue Overview: A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq were used with "host" or "hostaddr" connection parameters from untrusted input, attackers could...

PT-2018-2820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is caused by an out-of-bounds operation in the xudc ep enable handler of the udc-xilinx.ko module in the Linux kernel. This can allow an attacker to write to unauthorized memor...

DEBIAN-CVE-2018-19623

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values...

CVE-2018-19623

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values...

Huawei P20 Memory Write Overrun Vulnerability

Huawei P20 is a smartphone from Huawei. Huawei P20 suffers from a memory write out-of-bounds vulnerability. When the user performs certain query operations, the system does not properly process the returned response message, an attacker can send a well-constructed response message to the phone,...

CVE-2018-6073

A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6062

Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6063

Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6073

A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6062

Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...