LIVE555 Invalid Memory Access Vulnerability

LIVE555 is a set of open source C++ libraries for multimedia streaming. An invalid memory access vulnerability exists in the parseAuthorizationHeader function in versions prior to LIVE555 2019.02.27. An attacker can exploit this vulnerability via a malformed header to cause a memory access error...

DouPHP suffers from an application reinstallation vulnerability

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. DouPHP suffers from an application reinstallation vulnerability. An attacker can exploit the vulnerability to reinstall the...

EUVD-2019-10238

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

CVE-2019-5770

Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Apache Spark Local Mobilization Vulnerability

Apache Spark is a data processing engine that supports acyclic data streaming and in-memory computation. A local elevated privilege vulnerability exists in Apache Spark. An attacker can exploit this vulnerability to gain elevated privileges...

Vulnerability of the Server component: The MySQL database management system’s options, which allow a hacker to cause a service failure.

The vulnerability of the Server component: The options of the Oracle MySQL database management system are related to insufficient access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

QEMU Corrupted Memory Vulnerability (CNVD-2019-05083)

QEMU aka Quick Emulator is a suite of simulation processor software. The software is fast and cross-platform. A security vulnerability exists in the way requests are handled in QEMU. An attacker can exploit this vulnerability to corrupt memory...

CVE-2019-5747

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components consumed by the DHCP client, server, and/or relay might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte...

Code Execution Vulnerability in Encrypted Video by Screen Recording Expert

Screen Recording Expert is a professional tool for making screen recordings. A code execution vulnerability exists when Screen Recording Expert encrypts videos. An attacker can exploit the vulnerability to execute code...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel arises from errors in the processing of objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-20077)

e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...

Google Android System elevation of privilege vulnerability (CNVD-2018-26254)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

Arbitrary File Upload Vulnerability in the Frontend of Bizlaw eCom Information Management Software

Bizlawyer eTongue information management software is based on standardized management, the use of larger law firms needs to develop a comprehensive set of management software. There is an arbitrary file upload vulnerability in the front-end of Bizlawyer eTalk Information Management Software. An...

Remote Control Vulnerability in Hologic PLC FCS

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the Hologic PLC FCS, which can be exploited by an attacker to arbitrarily control the FCS by sending constructed packets that conform to a private...

PACCOIN Integer Overflow Vulnerability

PACCOIN is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PACCOIN's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HunterCoin Integer Overflow Vulnerability

HunterCoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HunterCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

DigitalCloudToken Digital Error Vulnerability

DigitalCloudToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mint' function in DigitalCloudToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

GZS Token Integer Overflow Vulnerability

GZS Token GZS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in GZS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

ProgressiveToken Integer Overflow Vulnerability

ProgressiveToken is a tradable Ether ERC20 token. ProgressiveToken's smart contract implementation of the sell function has an integer overflow vulnerability where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...

Crowdnext (CNX) Integer Overflow Vulnerability

Crowdnext CNX is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of CNX's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...