Google Android Qualcomm Video has an unspecified vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Video is a video component. A security vulnerability exists in Qualcomm Video in Android. No details of the vulnerability are available at this time...

PT-2018-3707 · Poppler +5 · Poppler +5

Name of the Vulnerable Software and Affected Versions: Poppler version 0.71.0 Description: The issue is related to a reachable abort in Object.h, which can lead to a denial of service. This is because the EmbFile::save2 function in FileSpec.cc lacks a stream check before saving an embedded file...

Juniper Junos Memory Exhaustion RDP DOS with JET support (JSA10882)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to a flaw with the Routing Protocols Daemon with Juniper Extension Toolkit support. A remote attacker could exhaust memory resources potentially causing the device to become...

TLS 1.0 Weak Protocol

The remote server offers deprecated TLS 1.0 protocol which can lead to weaknesses. No source data...

PT-2018-13429

Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description The issue is related to a security problem, but specific details are not provided. Recommendations At the moment, there is no information about a...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer out-of-bounds read vulnerability...

Unspecified Vulnerability in Apache Karaf

Apache Karaf is the United States Apache Apache Software Foundation for the deployment of applications and components of a lightweight OSGi Java Dynamic Modular System container. A security vulnerability exists in Apache Karaf versions prior to 3.0.9, prior to 4.0.9, and prior to 4.1.1. No detail...

Google Android Qualcomm WLAN Host suffers from an unspecified vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in Qualcomm WLAN Host in Android on Google Pixel and Nexus devices. No details of the...

Prototype Pollution in merge-recursive

All versions of merge-recursive are vulnerable to Prototype Pollution. When malicious user input is merged with another object it allows the attacker to modify the prototype of Object via proto causing the addition or modification of an existing property. Proof of concept: js var merge =...

PT-2018-1466 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description: The issue is caused by a buffer overflow in the JavaScript handler of Internet Explorer, allowing a remote attacker to execute...

CCleaner Adds Data Collection Feature With No Way to Opt-Out

Like many others, do you also believe that the popular system-cleaning tool CCleaner was performing well before Avast acquired the software from Piriform last year? If yes, then pop-up advertisements in the previous CCleaner software version was not the last thing you have to deal with. Avast has...

GHSA-9J5M-873F-XH76 Directory Traversal in static-html-server

Affected versions of static-html-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

NetScaler Gateway Error: "The published resource is not available currently"

Error: The published resource is not available currently...

Google Android MDSS Driver Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which MDSS driver is a multimedia display driver. A security vulnerability exists in the MDSS driver in Android, which stems from the program's failure to properly initialize da...

Google Android Camera Sequential Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Camera is one of the camera components. A privilege access control vulnerability exists in Camera in Android on Google Pixe...

CVE-2017-17443

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...

Google Android elevation of privilege vulnerability (CNVD-2018-11357)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component in versions of Android prior to 7.0. No...

PT-2018-10598 · Windscribe +1 · Windscribe +1

Name of the Vulnerable Software and Affected Versions: Windscribe version 1.81 Description: The issue concerns the VPN component in Windscribe, which uses the OpenVPN client and creates a system process named WindScribeService.exe. This process establishes a named pipe endpoint,...

PT-2018-5638 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA LOG.ini" without a cookie header,...

Multiple DVR Products Information Disclosure Vulnerability (May 2018) - Active Check

Multiple DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...