CVE-2019-13674

IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

DEBIAN-CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2016-9652

Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...

cPanel code issue vulnerability (CNVD-2020-58052)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A code issue vulnerability exists in cPanel versions prior to 82.0.15. The vulnerability stems from an improperly design...

V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42367)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

Foxit Reader Denial of Service Vulnerability (CNVD-2019-41608)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7. An attacker could exploit this vulnerability to cause a denial of service...

Linux kernel memory leak vulnerability (CNVD-2019-41716)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'cryptoreportstat' function in the crypto/cryptouserstat.c file in Linux kernel 5.3.11 and earlier versions. An attacke...

Mailbird Cross-Site Scripting Vulnerability (CNVD-2019-42567)

Mailbird is an email client application from the Mailbird team. A cross-site scripting vulnerability exists in Mailbird versions prior to 2.7.5.0 r, which can be exploited by an attacker to execute client-side code...

Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41670)

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to this version 2.50AAHH.0C0. An attacker could exploit the vulnerability to decrypt a previously encrypted password...

WordPress Unspecified Directory Traversal Vulnerability

Description WordPress is prone to an unspecified directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve sensitive information or execute...

Linux kernel null pointer dereference vulnerability (CNVD-2019-42382)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A btrfsverifydevextents null pointer dereference vulnerability exists in fs/btrfs/volumes.c in Linux kernel versions...

Intel Graphics Driver Input Validation Error Vulnerability

Intel Graphics Driver is the Intel graphics card driver. An input validation error vulnerability exists in the API in versions prior to Intel Graphics Driver 26.20.100.7209. An attacker could exploit this vulnerability to cause a denial of service...

Intel Graphics Driver Code Issue Vulnerability

Intel Graphics Driver is the Intel graphics card driver. A pointer corruption vulnerability exists in the Unified Shader Compiler in versions prior to Intel Graphics Driver 10.18.14.5074. An attacker could exploit this vulnerability to achieve elevation of privilege...

CVE-2019-11931

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions...

CVE-2019-18957

Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...

Linux kernel input validation error vulnerability (CNVD-2019-47001)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 2.6.33. An attacker could exploit this vulnerability to cause a kernel exception...

PT-2019-6589 · Poppler · Poppler

Name of the Vulnerable Software and Affected Versions: poppler versions prior to 0.16.3 Description: The issue is related to an integer overflow condition that occurs when parsing CharCodes for fonts. Recommendations: For versions prior to 0.16.3, update to version 0.16.3 or later to resolve the...

Istio Denial of Service Vulnerability

Istio is a set of open platforms for connecting, managing and securing microservices. A denial of service vulnerability exists in version 1.3.x of Istio prior to 1.3.5, which can be exploited by an attacker to cause a denial of service...

PT-2019-4046 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 25.20.100.6519 Description: The issue is related to insufficient input validation in the Kernel Mode module of the Intel Graphics Driver. This can potentially allow an authenticated user to cause a deni...

NVIDIA GeForce Experience Downloader Component Input Validation Error Vulnerability

NVIDIA GeForce Experience is a set of automatic graphics card update tools from NVIDIA. NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA that automatically updates graphics card drivers and supports performance management and optimization of the graphics...