2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10961)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345NsProtect.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

UBUNTU-CVE-2018-10992

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument, because the GNU...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09484)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09485)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09659)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A security vulnerability exists in the 2345BdPcSafe.sys X64 application file in 2345 Security Guard version 3.7, which originates from the program failing to validate the input value of IOCTL...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

Code injection

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

CVE-2017-18262

CVE-2017-18262 affects Blackboard Learn; unvalidated redirects exist via the Shibboleth login flow. The vulnerable endpoint is BLACKBOARD/webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl=, which can redirect signed-in users to an arbitrary URL. Connected sources corro...

PT-2018-6787

Name of the Vulnerable Software and Affected Versions: Blackboard Learn affected versions not specified Description: The issue allows unvalidated redirects on any signed-in user through its endpoints for handling Shibboleth logins. This is demonstrated by a URI such as...

CVE-2017-18262: Improper Input Validation

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

PT-2018-9953 · Wavpack +3 · Wavpack +3

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.1.0 and earlier Description: An issue was discovered related to DSDiff input, where out-of-bounds writes can occur due to a lack of validation of unknown chunk sizes in the ParseDsdiffHeaderConfig function. This is caused b...

Foxit Reader XFA boundItem Method Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA boundItem event of the Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before...

Foxit Reader TextBox Format Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in Foxit Reader's handling of TextBox objects, which can be exploited by an attacker to execute arbitrary code in the current process due to a failure to validate the object before performing...

Foxit Reader Heap Buffer Overflow Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in BMP graphics parsing, which can be exploited by an attacker to execute arbitrary code in the context of the current process, due to a lack of proper validation of user-supplied data...

Foxit Reader openList Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the openList method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

Foxit Reader XFA record remove remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA record remove method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

Foxit Reader XFA rlayout sheet remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the layout sheet property, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

Foxit Reader XFA field remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA field element, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...