Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall (CNVD-2018-24683)

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall (CNVD-2018-24703)

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

PT-2018-19018

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 8.1 Description The issue concerns possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege, revealing the user's keypresses while the screen was...

Denial of Service Vulnerability in WIFI Sharing Wizard v5.0.0919

WIFI Sharing Wizard is a WIFI sharing software. WIFI Sharing Wizard v5.0.0919 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause a computer to blue screen, resulting in a denial of service...

Security Advisory - Lock-screen Bypass Vulnerability in Huawei Smartphones

There is a lock-screen bypass vulnerability in radio module of some Huawei smartphones. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability. Vulnerability ID: HWPSIRT-2018-04055 This vulnerability has...

[SECURITY] [DSA 4330-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4330-1 [email protected] https://www.debian.org/security/ Michael Gilbert November 02, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4330-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Bug

UPDATE Apple tackled a bevy of vulnerabilities across all its platforms Tuesday, including one that allowed a remote attacker to initiate a FaceTime call by exploiting a bug in some model iPhones, iPads, and iPad Air devices. The wide-ranging security fixes came on the same day Apple announced a...

chromium-browser: Security UI occlusion in full screen mode

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

Integer overflow

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...

CVE-2017-18172

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...

CVE-2017-18172

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...

CVE-2017-18172

CVE-2017-18172 describes a local vulnerability in various Snapdragon Mobile/Automotive platforms where a check of a contiguous buffer can overflow for certain buffer sizes, causing an Integer Overflow or Wraparound in System UI. Affected are devices with large screen resolutions (e.g., 1440x2560)...

Security update for Chromium (important)

This update for Chromium to version 70.0.3538.67 fixes multiple issues. Security issues fixed bsc1112111: - CVE-2018-17462: Sandbox escape in AppCache - CVE-2018-17463: Remote code execution in V8 - Heap buffer overflow in Little CMS in PDFium - CVE-2018-17464: URL spoof in Omnibox -...

Denial of Service Vulnerability in XPacket Driver for Fair's Personal Firewall Software

Fair Personal Firewall Pro is one of Fair Security Labs products. It provides a full range of network security protection for your computer. A security vulnerability exists in the XPacket.sys driver of Fair Personal Firewall Pro. An attacker can exploit this vulnerability by sending a 0x804D2190...

CVE-2018-17476

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-17471

Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

PT-2018-3219

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to incorrect dialog placement in the Cast UI, which can be exploited by a remote attacker to obscure the full screen warning. This can be achieved via a crafted HTML...

PT-2018-3215

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue exists due to insufficient input validation in Google Chrome, allowing a remote attacker to hide the full screen warning using a specially crafted HTML page. This can be achiev...