Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25199)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the mandatory property of TimeField in Foxit Reader 9.2.0.9297 and...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25196)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the richValue property of the text field in Foxit Reader 9.2.0.9297 a...

Adobe Digital Editions Heap Buffer Overflow Vulnerability (CNVD-2019-06888)

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. Windows, Macintosh and iOS-based platforms, Adobe DE 4.5.8 and previous versions of the heap buffer overflow...

Microsoft SQL Server Management Studio 17.9 - .xmla XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications...

Cisco Webex Network Recording Player and Webex Player Remote Code Execution Vulnerability (CNVD-2019-39618)

Cisco Webex Network Recording Player and Webex Player are both Cisco players for playing video conference recordings. A remote code execution vulnerability exists in Cisco Webex Network Recording Player and Webex Player for Windows-based platforms, which stems from improper validation of Advanced...

Cisco Webex Network Recording Player and Webex Player Input Validation Vulnerability

Cisco Webex Network Recording Player and Webex Player are both Cisco players for playing video conference recordings. An input validation vulnerability exists in Cisco Webex Network Recording Player and Webex Player for Windows-based platforms, which arises from improper software validation of...

Cisco Webex Network Recording Player and Webex Player Remote Code Execution Vulnerability

Cisco Webex Network Recording Player and Webex Player are both Cisco players for playing video conference recordings. A remote code execution vulnerability exists in Cisco Webex Network Recording Player and Webex Player for Windows-based platforms, which stems from improper validation of Advanced...

Cisco Webex Network Recording Player and Webex Player Arbitrary Code Execution Vulnerability

Cisco Webex Network Recording Player and Webex Player are both Cisco players for playing video conference recordings. A security vulnerability exists in Cisco Webex Network Recording Player and Webex Player for Windows-based platforms, which arises from the software's improper validation of...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20648)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Selection Change event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program...

CVE-2018-15416

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2018-15422

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2018-15412

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

Zahir Enterprise Plus 6 Stack Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Zahir Enterprise Plus 6 Stack Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Zahir Enterprise Plus version ...

CVE-2018-8479

A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK...

Spoofing

A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK...

CVE-2018-8479

A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK...

CVE-2018-8479

Azure IoT SDK Spoofing Vulnerability (CVE-2018-8479) affects the C SDK for Azure IoT Device Provisioning on Windows using the HTTP transport. The root cause is improper validation of HTTP certificates in the transport library, enabling potential server impersonation via spoofing/MITM during provi...

Microsoft Releases Patches for 60 Flaws—Two Under Active Attack

Get your update caps on. Just a few minutes ago Microsoft released its latest monthly Patch Tuesday update for August 2018, patching a total of 60 vulnerabilities, of which 19 are rated as critical. The updates patch flaws in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore,...

Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2016-4560

Summary IBM SDK for Node.js installation executables on the Windows platform are affected by CVE-2016-4560 Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges on the system, caused by an untrusted search path. An...

Security Bulletin: Vulnerability in IBM Java Runtime affect Rational Host On-Demand (CVE-2016-0603)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 1.6 , 1.7 and 1.8 that is used by Rational Host On Demand .JRE installation executables on the Windows platform are affected by this vulnerability. Vulnerability Details CVE-ID: CVE-2016-0603 Descriptio...