1691 matches found
The vulnerability of the Linux operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the pipeadvance function in the Linux operating system is related to a unit that is not properly accounted for. Exploiting this vulnerability can allow an attacker to obtain confidential information...
Nitro Pro Memory Corruption Vulnerability
Nitro Pro is a U.S. company Nitro PDF production and management software. A memory corruption vulnerability exists in the PDF parsing feature of Nitro Pro version 10.5.9.9. An attacker can exploit the vulnerability to send a specific PDF file to the victim, resulting in memory corruption...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the V8 component in Google Chrome browsers arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...
Juniper Junos Denial of Service Vulnerability (CNVD-2017-00603)
Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to cause...
QEMU 'VIRTIO_GPU_CMD_SET_SCANOUT()' function out of bounds denial of service vulnerability
QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An out-of-bounds denial of service vulnerability exists in the QEMU 'VIRTIOGPUCMDSETSCANOUT' function. An attacker could exploit this...
QEMU 'qemu-char.c' Denial of Service Vulnerability
QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the qemu-char.c file in QEMU. An attacker can exploit this vulnerability to cause a denial of...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12362)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Google Nexus NVIDIA GPU Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12234)
Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet PC developed by Google and the Open Handheld Alliance OHA.The NVIDIA GPU Driver is one of the NVIDIA GPU drivers that is used in the... A local elevation of privilege vulnerability exists in the NVIDIA GPU...
Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-10936)
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the kernel mode driver for Microsoft Windows. An attacker could exploit this vulnerability to run arbitrary code in kernel mode...
Google Chrome DevTools Boundary Read Vulnerability
Google Chrome is a popular web browser. A boundary read vulnerability exists in Google Chrome DevTools. An attacker can exploit the vulnerability to obtain sensitive information...
Adobe Flash Player Competitive Conditions Vulnerability
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A competitive condition vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability t...
The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.
The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...
Unspecified Vulnerability in libarchive ZIP Parser
libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's ZIP parser that can be exploited by an attacker to cause a program crash...
libarchive ISO Parser Infinite Loop Vulnerability
libarchive is a multi-format archive and compression library. A security vulnerability exists in the ISO parser of libarchive. An attacker could exploit this vulnerability to cause an infinite loop...
libarchive RAR Parser Null Pointer Access Vulnerability
libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause null pointer access...
PHP 5.6.x < 5.6.22 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.22. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the gdContributionsCalc function within file ext/gd/libgd/gdinterpolation.c. An unauthenticated,...
Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-1097)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Uclibc-ng Denial of Service Vulnerability
Uclibc-ng is a C library for developing embedded Linux systems. A denial of service vulnerability exists in Uclibc-ng. An attacker can exploit this vulnerability to cause a denial of service...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a local attacker to increase their privileges by using a special application known as “Win32k Pool Buffer Overflow Vulnerability”...
Adobe Flash Player Heap Buffer Overflow (APSB15-32: CVE-2015-8446)
A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...