CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Parsewave function in the Sonivox DLS-to-EAS converter for Android operating systems arises from the possibility of using negative numbers when setting the field size. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

Gentoo Security Advisory GLSA 201507-17

Gentoo Linux Local Security Checks GLSA 201507-17 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

MASM32 11R - Crash (PoC)

MASM32 11R - Crash PoC EXPLOIT TITLE: Masm32v11r Buffer OverflowSEH overwrite crash POC AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 22nd September 2015 Download Link : http://www.masm32.com/masmdl.htm Tested On : Windows 10 Steps to Crash :- Step 1: Execute this python script Step 2: This...

Corel WordPerfect Heap Buffer Overflow Vulnerability

Corel WordPerfect Office Suite is an office software suite. A heap buffer overflow vulnerability exists in the Microsoft Word document conversion feature of Corel WordPerfect, which can be exploited by a remote attacker to execute arbitrary code via a constructed document...

CVE-2015-6948

Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document...

openssl: X509_to_X509_REQ NULL pointer dereference

A NULL pointer dereference flaw was found in OpenSSL's X.509 certificate handling implementation. A specially crafted X.509 certificate could cause an application using OpenSSL to crash if the application attempted to convert the certificate to a certificate request...

openssl: X509_to_X509_REQ NULL pointer dereference

A NULL pointer dereference flaw was found in OpenSSL's X.509 certificate handling implementation. A specially crafted X.509 certificate could cause an application using OpenSSL to crash if the application attempted to convert the certificate to a certificate request...

MediaWiki TimedMediaHandler Extension Denial of Service Vulnerability

MediaWiki is a free and freely available web-based wiki engine developed and maintained by the Wikimedia Foundation and the MediaWiki Volunteers for the deployment of in-house knowledge management and content management systems.TimedMediaHandler is one of the extensions used to display audio and...

Google to Pause Flash Ads in Chrome Starting Next Week

Google on Tuesday will begin pausing Flash ads by default in Chrome, a move that is designed mainly to help improve browser speed, but that will also be a security upgrade for users. The company announced the plan back in June and said this week that it will make the behavior the default setting...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05719)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ChiefPDF Software v2.x - Buffer Overflow Vulnerability

Document Title: =============== ChiefPDF Software v2.x - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1578 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ==================================== 157...

Adobe Flash - Out-of-Bounds Read in UTF Conversion

Adobe Flash - Out-of-Bounds Read in UTF Conversion Source: https://code.google.com/p/google-security-research/issues/detail?id=378&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id We've hit the same bug from two different avenues: 1 A report to the Chromium bug tracker:...

Adobe Flash - Out-of-Bounds Read in UTF Conversion

Source: https://code.google.com/p/google-security-research/issues/detail?id=378&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id We've hit the same bug from two different avenues: 1 A report to the Chromium bug tracker:...

DEBIAN-CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...