CVE-2018-17692: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17691: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17693: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_Desktop

VirtualBox CVE-2018-2860https://github.com/niklasb/sploits...

[SECURITY] Fedora 28 Update: unrtf-0.21.9-8.fc28

UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...

Remote Code Execution (RCE)

stunnel is vulnerable to remote code execution RCE attacks. The vulnerability exists as stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via ...

Fedora 29 : libgxps (2019-8e9789a629)

libgxps 0.3.1 release. - Fix font scaling when converting xps to pdf - Handle errors returned by archivereaddata in GXPSArchive - Ensure gxpsarchivereadentry fills the GError in case of failure - Make the pdf generated by xpstopdf to be 96 dpi - Fix OUTPUT FILE description in man pages - Clear th...

MGASA-2019-0024 Updated nettle packages fix security vulnerability

A leaky data conversion exposing a manager oracle CVE-2018-16869...

Updated nettle packages fix security vulnerability

A leaky data conversion exposing a manager oracle CVE-2018-16869...

CVE-2018-20584

JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...

CVE-2018-20584

JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...

CVE-2018-20584: Undefined Security Weakness

JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1414)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12390 - Mozilla: Crash with nested event loops CVE-2018-12392 -...

DEBIAN-CVE-2018-20430

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c...

UBUNTU-CVE-2018-20430

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c...

openSUSE Security Update : libnettle (openSUSE-2018-1597)

This update for libnettle fixes the following issues : Security issues fixed : - CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle bsc1118086 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

The vulnerability of the Flash Player software, related to errors in data type conversion, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software is related to errors in data type conversion. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

SUSE-SU-2018:4193-1 Security update for libnettle

This update for libnettle fixes the following issues: Security issues fixed: - CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle bsc1118086...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a lack of conversion checks after calls to IsConcatSpreadable which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different CVE-2017-0010, CVE-2017-0015,...

CVE-2018-16869

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases...