1373 matches found
Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2019-24196)
PhantomPDF is a multifunctional PDF editor. A denial of service vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11 when calling the clone function. The vulnerability stems from an infinite loop caused by an obfuscation of the relationship between the factor object and the parent...
DEBIAN-CVE-2019-5831
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2018-6142
Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...
UBUNTU-CVE-2019-5831
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-12292
Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...
ZTE WF820+ LTE Outdoor CPE Cross-Site Request Forgery Vulnerability
The ZTE WF820+ LTE Outdoor CPE is an outdoor CPE Customer Premise Equipment device from ZTE China. A cross-site request forgery vulnerability exists in the ZTE WF820+ LTE Outdoor CPE UKBBWF820+1.0.0B06 prior version, which originates from a WEB application that does not adequately verify that the...
CVE-2019-5242
There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write...
chromium-browser: Memory corruption in V8
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2018-4446
This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1...
Synology Application Service Information Disclosure Vulnerability
Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Application.Info in Synology Application Service versions prior to 1.5.4-0320, which can be exploited by an...
Mozilla Thunderbird < 60.6.1
The version of Thunderbird installed on the remote Windows host is prior to 60.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-12 advisory. - Incorrect handling of \proto\ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for...
CVE-2018-20034
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vend...
CVE-2018-12401
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service DOS attacks. This vulnerability affects Firefox 63...
jenkins-plugin-blueocean: Blue Ocean did not require CSRF tokens (SECURITY-1201)
A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...
DEBIAN-CVE-2019-5762
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...
chromium-browser: Insufficient policy enforcement in the browser
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...
CVE-2017-1002157
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...
CVE-2018-6127
Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...