The vulnerability of the NULL character detection function in Cisco Firepower Threat Defense’s network interface controllers, as well as in Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the NULL character detection function in Cisco Firepower Threat Defense’s microprogramming network interface cards, as well as in Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, stems from errors in command text...

CVE-2019-16214

Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence which introduces a...

CVE-2019-16214

Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence which introduces a...

CVE-2019-16214

CVE-2019-16214 affects Libra Core prior to 2019-09-03, where an erroneous regular expression for inline comments lets a nonstandard line-break character (\r) appear to terminate a comment in audits, potentially misleading readers about code execution. The Move module author could place // followe...

Cisco NX-OS Software Privilege License and Access Control Issues Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A permission and access control issue vulnerability exists in the Simple Network Management Protocol Access Control Column feature of Cisco NX-OS Software, which can be...

Design/Logic Flaw

The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...

CVE-2019-15320

The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...

CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

Adobe Character Animator CC 2019 Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Character Animator CC 2019 is a desktop application software product that combines real-time motion capture with a multi-track recording system to control layered 2D puppets drawn in Photoshop or Illustrator. An insecure library loading DLL hijacking vulnerability exists in Adobe Character...

CVE-2019-7870

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7870

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

Code injection

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7870

CVE-2019-7870 affects Adobe Character Animator up to version 2.1 (Windows/macOS). The issue is insecure library loading (DLL hijacking) that can lead to arbitrary code execution if exploited. Public sources consistently describe this vulnerability as tied to the DLL loading weakness in Character ...

CVE-2019-7870

Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to arbitrary code execution...

APSB19-32 Security update available for Adobe Character Animator CC

Adobe has released updates for Adobe Character Animator CC for Windows and macOS. This update resolves an insecure library loading vulnerability that could lead to privilege escalation...

NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0017)

The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enoug...

Critical: thunderbird

Issue Overview: When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even...

CVE-2019-14704

An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field...

[SECURITY] Fedora 29 Update: oniguruma-6.9.1-2.fc29

Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...

[SECURITY] Fedora 30 Update: oniguruma-6.9.2-2.fc30

Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...