Microsoft Windows LNK File Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Microsoft Windows LNK File Uninitialized Pointer Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Office Word Preview Unsafe Hyperlink Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the displa...

The vulnerability of the ObjectMapper component in the FasterXML jackson-databind library allows attackers to bypass the “black list” restrictions and execute arbitrary code.

The vulnerability of the ObjectMapper component in the FasterXML jackson-databind library relates to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to bypass the “black list” restrictions and execute arbitrary code using specially...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-17076)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the camera 'update' function of the video-core HTTP server in the Samsung SmartThings Hub, which stems from the...

EulerOS 2.0 SP3 : shadow-utils (EulerOS-SA-2018-1169)

According to the version of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A buffer overflow flaw leading to heap memory corruption was found in the shadow-utils's newusers utility. A local, authenticated attacker cou...

Microsoft Office Excel Parsed Expression Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Service Delivery Manager

Summary OpenSSL vulnerabilities were disclosed on September 22, 2016 by the OpenSSL Project. OpenSSL is installed on the operating system shipped via IBM Service Delivery Manager. IBM Service Delivery Manager has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6303 DESCRIPTIO...

Security Bulletin: Vulnerability in Apache Commons affects IBM SPSS Modeler (CVE-2015-7450)

Summary Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of data with Java InvokerTransformer class. By sending specially crafted data, an attacker could exploit this vulnerability to execute arbitrary Java code on the...

CVE-2018-11481

TP-LINK IPC TL-IPC223P-6, TL-IPC323K-D, TL-IPC325KP-, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters...

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

PHP out-of-bounds read vulnerability (CNVD-2018-09229)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A security vulnerability exists in th...

Drupal Core Remote Code Execution Vulnerability

Drupal is a free and open source content management system created by Dries Buytaert and written in PHP. In the industry Drupal is often regarded as a content management framework, rather than a content management system in the general sense. A remote code execution vulnerability exists in severa...

Huawei P9 Lite Inputhub Driver Buffer Overflow Vulnerability

Huawei P9 Lite is a smartphone product from Chinese company Huawei Huawei. The Huawei P9 Lite Inputhub driver suffers from a buffer overflow vulnerability that can cause the phone to reboot by an attacker by tricking the user into installing a malicious application, which sends specific parameter...

Ubuntu 14.04 LTS / 16.04 LTS : ICU vulnerability (USN-3610-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3610-1 advisory. It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly...

USN-3610-1 icu vulnerability

It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service...

IBM ConnectionsXML External Entity Injection Vulnerability

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An XML external entity...

QOS.CH SLF4J slf4j-ext Module Access Restriction Bypass Vulnerability

QOS.CH SLF4J is a framework for accessing logging systems and viewing log files from the Swiss company QQS.CH. slf4j-ext module is one of the extension modules. A security vulnerability exists in org.slf4j.ext.EventData in the slf4j-ext module of QOS.CH SLF4J. A remote attacker could exploit this...

Apache Commons-Email Information Disclosure Vulnerability

Apache Commons-Email is the United States Apache Apache Software Foundation, an application programming interface that provides e-mail sending capabilities. An information disclosure vulnerability exists in Apache Commons-Email that originates from the program failing to properly validate input. ...

CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series...