57 matches found
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to writing data beyond the buffer in memory, allowing attackers to execute arbitrary code in the context of the current user.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to data writing beyond the buffer limits in memory. Exploiting this vulnerability could...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...
OSIsoft PI Cross-Site Scripting Vulnerability
OSIsoft PI is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, USA. The platform supports data acquisition, analysis and visualization. A cross-site scripting vulnerability exists in OSIsoft PI version 2017 and 2017 R2, which can be exploited by...
OSIsoft PI Vision
1. EXECUTIVE SUMMARY CVSS v4.8 ATTENTION: Low skill level to exploit Vendor: OSIsoft Equipment: PI Vision Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data...
Libdoc Buffer Out-of-Bounds Read Vulnerability
libdoc is a C library for extracting text from MicroSoft doc files. A heap buffer out-of-bounds read vulnerability exists in the 'getlong' function of the numutils.c file in libdoc versions 2017-10-23 and earlier, which can be exploited by an attacker to cause a denial of service application cras...
libwav denial of service vulnerability
libwav is a wav encoding library written in C language. A security vulnerability exists in the 'printinfo' function of the wavinfo/wavinfo.c file in libwav versions 2017-04-20 and earlier. An attacker can exploit this vulnerability to cause a denial of service segment error...
CVE-2018-14051
The function wavread in libwav.c in libwav through 2017-04-20 has an infinite loop...
Creditwest Bank CMS Project Cross-Site Request Forgery Vulnerability
The Creditwest Bank CMS Project aka CWCMS is a content management system CMS. A cross-site request forgery vulnerability exists in the Website Configuration Update feature in Creditwest Bank CMS Project 2017-07-28 and prior releases. A remote attacker can exploit this vulnerability to inject...
PT-2018-5371 · Unknown · Tinysvcmdns
Name of the Vulnerable Software and Affected Versions: tinysvcmdns library version 2017-11-05 Description: An exploitable NULL pointer dereference issue exists in the tinysvcmdns library. A specially crafted packet can cause the library to dereference a NULL pointer, leading to a server crash and...
idevicerestore Security Bypass Vulnerability
idevicerestore is a tool for upgrading and downgrading iOS. A security bypass vulnerability exists in the 'socketcreate' function of the socket.c file in versions of idevicerestore 2017-12-10 and earlier. A remote attacker can exploit this vulnerability by connecting to an IPv4 TCP socket to bypa...
DokuWiki /inc/parser/xhtml.php file cross-site scripting vulnerability
DokuWiki is a German software developer Andreas Gohr developed a PHP-based Wiki engine , it is mainly used for small and medium-sized team and personal website knowledge base management , and provides version control , full-text search and permission control and other functions . A cross-site...
CVE-2017-9627
An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service...
libdwarf heap buffer overflow vulnerability (CNVD-2017-07503)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the 'dwarfformsdata' function in libdwarf version 2017-03-21. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...
libdwarf heap buffer overflow vulnerability (CNVD-2017-07540)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the 'dwarfformsdata' function in libdwarf version 2017-03-21. An attacker can exploit this vulnerability to cause a heap buffer out-of-bounds read...