3671 matches found
chromium-browser: Use after free in Blink
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page...
Apache Archiva Input Validation Error Vulnerability (CNVD-2019-26509)
Apache Archiva is a suite of software from the Apache USA Software Foundation for managing one or more remote repositories. The software provides features such as remote Repository agents, role-based secure access management, and usage reporting. An input validation error vulnerability in Apache...
PT-2019-19383 · Daview · Daviewindy
Name of the Vulnerable Software and Affected Versions: DaviewIndy versions 8.98.7 and earlier Description: The issue is triggered when a user opens a malformed PDF file that is mishandled by Daview.exe, leading to an integer overflow. This could allow attackers to exploit the issue and achieve...
CVE-2019-2723
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
Foxit Studio Photo Remote Code Execution Vulnerability
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacker...
CVE-2018-0248
A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of service...
PT-2019-1922 · Mysql Server +5 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...
Jupyter Notebook Open Redirect Vulnerability
Jupyter Notebook is an open source web application that lets you create and share documents containing live code, equations, visualizations, and narrative text. An open redirection vulnerability exists in Jupyter Notebook versions prior to 5.7.8. An attacker can exploit this vulnerability via emp...
CVE-2018-4426
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...
CVE-2018-4397
Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS...
DEBIAN-CVE-2018-4323
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
DEBIAN-CVE-2018-4314
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
UBUNTU-CVE-2018-4373
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...
UBUNTU-CVE-2018-4392
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...
CVE-2017-16775
Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
PT-2019-8956 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration...
Nagios XI SQL Injection Vulnerability (CNVD-2019-10017)
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A SQL injection vulnerability exists in Nagios XI versions prior to 5.5.11. The vulnerability can be exploited by an attacker to execu...
PT-2019-19435 · Nagios · Nagios Im
Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...
ArcSight Logger Information Disclosure Vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. An information disclosure vulnerability exists in Micro Focus...