Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...

Buffer overflow

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges...

CVE-2019-6202

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges...

CVE-2019-6213

CVE-2019-6213 is a kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges. Apple’s advisories (HT209447 for tvOS/iOS 12.1.2/12.1.3, HT209443 for iOS 12.1.3, and related Apple security notes) describe a memory corruption issue resolved ...

CVE-2019-6202

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges...

CVE-2019-6213

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-6221

CVE-2019-6221 affects Apple Core Media (and is referenced in iTunes 12.9.3 for Windows) as an out-of-bounds read vulnerability that could allow a malicious app to elevate privileges. Apple advisories indicate fixes in iOS 12.1.3, macOS Mojave 10.14.3, and iTunes 12.9.3 for Windows through improve...

CVE-2019-6202

CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...

CVE-2019-6221

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-18710 DESCRIPTION: Linux Kernel could allow a local attacker to obtain sensitive information, caused by improper bounds checking in...

AIX 7.2 TL 2 : tcpdump (IJ12982)

https://vulners.com/cve/CVE-2018-19519 https://vulners.com/cve/CVE-2018-19519 Tcpdump is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the printprefix function of print-hncp.c. By using a specially-crafted packet data, a remote attacker could overflow a buffer...

AIX 7.2 TL 3 : tcpdump (IJ12983)

https://vulners.com/cve/CVE-2018-19519 https://vulners.com/cve/CVE-2018-19519 Tcpdump is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the printprefix function of print-hncp.c. By using a specially-crafted packet data, a remote attacker could overflow a buffer...

Buffer Overflow Vulnerability in iSmartViewPro Software

iSmartViewPro is a network surveillance software to monitor your home or store in real time. Users can add, edit or delete devices, watch videos in real time, control the PTZ by sliding or pressing buttons, set video parameters, capture pictures, playback videos, set alarms, etc. It can be used t...

The vulnerability of the sec_merge_hash_lookup function in the GNU Binutils development tool, related to incorrect checking of memory access boundaries, allows a hacker to trigger a service failure.

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...

Design/Logic Flaw

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

Ubuntu 18.04 LTS : Linux kernel (AWS, GCP, KVM, OEM, Raspberry Pi 2) vulnerabilities (USN-3871-3)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3871-3 advisory. Wen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to...