Code injection

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...

CVE-2019-20831

CVE-2019-20831 : Affected product is Foxit Reader/PhantomPDF with the 3D Plugin Beta prior to version 9.5.0.20733. The issue arises from void data mishandling in the plugin, which can cause the application to crash. The connected Red Hat/CVE and CNVD entries corroborate the same description. No e...

Opera Software Opera Input Validation Error Vulnerability

Opera Software Opera is a web browser from the Norwegian company Opera Software that supports multi-window browsing, customizable user interfaces, and more. An input validation error vulnerability exists in previous versions of Opera Software Opera 53 for Android-based platforms. The vulnerabilit...

Huawei CloudEngine 12800 Information Disclosure Vulnerability

The Huawei CloudEngine 12800 is a 12800 series data center switch from Huawei, China. An information disclosure vulnerability exists in the Huawei CloudEngine 12800 that stems from mishandling of data. An authenticated attacker can exploit this vulnerability to cause information disclosure...

Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2020-36736)

Huawei Mate 9 and others are products of Huawei, a Chinese company.Huawei Mate 9 is a smartphone.Huawei Mate 10 is a smartphone product of Huawei.Honor 9 Lite is a smartphone. An information disclosure vulnerability exists in multiple Huawei products, which originates from the system mishandling...

JSC BytecodeGenerator::emitEqualityOpImpl Data Mishandling

JSC: A bug in BytecodeGenerator::emitEqualityOpImpl Related CVE Numbers: CVE-2019-8684. PoC: let a = 1 || typeof 1 === 'string'; Generated bytecode: BPmgTo:0x7ff1965a0000-0x7ff1965a8000, NoneGlobal, 37: 11 instructions 0 wide instructions, 2 instructions with metadata; 225 bytes 188 metadata byte...

pdfresurrect 0.15 - Buffer Overflow

pdfresurrect 0.15 - Buffer Overflow Exploit Title: pdfresurrect 0.15 Buffer Overflow Date: 2019-07-26 Exploit Author: j0lama Vendor Homepage: https://github.com/enferex/pdfresurrect Software Link: https://github.com/enferex/pdfresurrect Version: 0.15 Tested on: Ubuntu 18.04 CVE : CVE-2019-14267...

CVE-2019-13380

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

CVE-2019-9639

Removed by vendor...

Security Bulletin: Potential information disclosure in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1957)

Summary There is a potential information disclosure in WebSphere Application Server CVE-2018-1957 Vulnerability Details CVEID: CVE-2018-1957 DESCRIPTION: IBM WebSphere Application Server could allow sensitive information to be available caused by mishandling of data by the application based on an...

Code injection

IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequestauthenticate API when an unprotected URI is accessed. IBM X-Force ID: 153629...

CVE-2018-1957

CVE-2018-1957 is an information-disclosure vulnerability in IBM WebSphere Application Server (WAS). Affected WAS versions include 9.0.0.0 through 9.0.0.9 (and related WAS deployments in IBM Cloud/Jazz contexts). The root cause is mishandling of data by the application based on an incorrect return...

Ahead of GDPR, Information Governance Comes into Its Own

LAS VEGAS – In sharp contrast to a year ago, a full 98 percent of US enterprises in a survey from the Information Governance Institute have embarked on information governance IG projects. That’s dramatically up to say the least: Just 10 percent last year had projects in place. Why the staggering...

Cross site scripting

Cross Site Scripting XSS exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data...

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

CVE-2017-7146

CVE-2017-7146 affects iOS before 11, involving the Security component. A crafted app could mishandle Keychain data to track users across installs. The issue is documented by Apple’s security content for iOS 11, indicating remediation via updating to iOS 11 or later. If evaluating risk, note that ...

SUSE-SU-2016:3069-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. This feature was added: - Support for the 2017 Intel Purley platform. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is...

PHP < 5.5.37, 5.6.x < 5.6.23, 7.x < 7.0.8 Multiple Vulnerabilities (Aug 2016) - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

USN-1732-1: OpenSSL vulnerabilities

Adam Langley and Wolfgang Ettlingers discovered that OpenSSL incorrectly handled certain crafted CBC data when used with AES-NI. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 12.10...

Data Breach Affects Two Million NY Customers, State Commission to Investigate

The New York State Public Service Commission announced yesterday they’ll be looking into a data breach that may have exposed the personal information of almost two million customers to unknown attackers. An employee from a software consulting firm contracted by New York State Electric & Gas NYSEG...