AZL-38485 CVE-2018-20506 affecting package ceph for versions less than 18.2.1-1

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow and resultant buffer overflow for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to...

SUSE-SU-2019:0766-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe bsc1130267. - CVE-2018-12181: Fixed a stack buffer overflow in the...

Palo Alto Networks < 7.1.23 / 8.0.x < 8.0.16 / 8.1.x < 8.1.7 Integer Overflow Vulnerability (PAN-SA-2019-0006)

The version of Palo Alto Networks PAN-OS running on the remote host is prior to 7.1.23 or 8.0.x prior to 8.0.16 or 8.1.x prior to 8.1.7. It is, therefore, affected by an integer overflow vulnerability exists in the Linux Kernel of PAN-OS. An authenticated, local attacker can exploit this, via...

CVE-2018-1992

The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker wer...

Privilege Escalation in PAN-OS

Palo Alto Networks is aware of an integer overflow vulnerability in the Linux kernel's createelftables function. Ref PAN-105966, CVE-2018-14634 Successful exploitation of this issue may allow an unprivileged local user to escalate their privileges on the system. To successfully exploit this...

Through the Server Info in a buffer overflow to achieve the Steam client RCE-vulnerability warning-the black bar safety net

In Steam and other V social game such as CSGO, Half-Life, TF2, built-in a looking for a server browser server browser, and a game server. In order to obtain information about these server information, the server browser using a method called server query server queries a specific UDP communicatio...

Google Chrome < M73 - MidiManagerWin Use-After-Free Exploit

Google Chrome M73 - MidiManagerWin Use-After-Free Exploit MidiManagerWin uses a similar instanceid mechanism to the TaskService implementation to ensure that delayed tasks are only executed if the MidiManager instance that they were scheduled on is still alive. However, this instanceid is an int,...

CVE-2018-12201

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...

UBUNTU-CVE-2018-12201

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...

Adobe Digital Editions < 4.5.10.186048 Arbitrary Code Execution (APSB19-16)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.10.186048. It is, therefore, affected by a vulnerability as referenced in the APSB19-16 advisory. - Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2019:0248-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-11938

Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

UBUNTU-CVE-2019-9036

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle in mat5.c...

Intel PROSet Wireless Buffer Overflow Vulnerability

Intel PROSet Wireless is a driver for the Intel PROSet wireless card from Intel USA. A buffer overflow vulnerability exists in the command line interface in IntelR PROSet Wireless version 20.50 and earlier. A local attacker could exploit this vulnerability to cause a denial of service...

MGASA-2019-0088 Updated thunderbird packages fix security vulnerability

A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitable crash. CVE-2018-18356 An integer overflow vulnerability in the Skia library can occur after specific transform operations, leading to a potentially exploitable crash...

Mozilla Firefox ESR Security Advisories (MFSA2019-04, MFSA2019-05) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Foxit 3D Plugin Beta Integer Overflow Vulnerability

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. An integer overflow vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. An...

CVE-2018-16021

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a heap overflow vulnerability. Successful...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

RGui 3.5.0 - Local Buffer Overflow (SEH)(DEP Bypass)

RGui 3.5.0 - Local Buffer Overflow SEHDEP Bypass !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: RGui 3.5.0 - Local Buffer Overflow SEHDEP Bypass Date: 01-09-2018 Vulnerable Software: RGui 3.5.0 Vendor Homepage: https://www.r-project.org/ Version: 3.5.0 Software Link:...