The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows operating system kernels relates to errors in data processing in the device’s memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

[SECURITY] Fedora 30 Update: jackson-databind-2.10.0-1.fc30

The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...

The vulnerability in the OpenSSL::X509::Name component of the OpenSSL library for the Ruby programming language allows a perpetrator to forge X509 certificates.

The vulnerability of the OpenSSL::X509::Name component in the OpenSSL library for the Ruby programming language is related to data processing errors. Exploiting this vulnerability could allow a malicious actor to perform certificate X509 fraud remotely...

CVE-2018-17791

Newgen OmniFlow Intelligent Business Process Suite iBPS 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored on the server side and fetched from the server every time the user visits the D, creating business...

Saia Burgess Controls Processor Unit

Binary data 764930.prm...

The vulnerability of the Jenkins Script Security plugin, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Jenkins Script Security plugin is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Introducing EQR — The Need for Petabyte-Scale Real-Time Analysis

Making Fast Decisions from Lots of Data One of the most difficult things to solve for in the Security industry is scale. Security is essentially a big data problem—data that is dynamic, and variadic. You need to correlate lots of disparate data elements that contain dynamically changing parameter...

The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment, related to data processing flaws, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2018-8035

This CVE concerns Apache UIMA DUCC (

(Pwn2Own) Oracle VirtualBox OHCI Integer Overflow Information Disclosure Vulnerability

Workstation This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

The vulnerability of the Microsoft Office package, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

The vulnerability of the xfs_attr_shortform_addname function in the XFS file system implementation of Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the xfsattrshortformaddname function in the XFS file system implementation of Linux operating systems is related to incorrect data processing. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the cdrom_ioctl_drive_status() function in Linux operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Microsoft Edge, related to errors in processing service data, allows attackers to compromise the confidentiality of protected information.

The vulnerability of Microsoft Edge is related to errors in processing service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information by using a specially crafted web page...

Open Positioner: my new project for tracking IT and security jobs

The idea of my new project is to retrieve the data from job-searching websites and provide better filtering, searching and visualization. I think for the most people who read this, searching for a job in Internet is a pretty common activity. Even if you are not going to change job right now, it...

ACD Systems Canvas Draw 4 FillSpan Out of Bounds Write Code Execution Vulnerability

Summary An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

The vulnerability of SAP Business Process Automation platform, related to incorrect processing of address data, allows a hacker to access and view arbitrary files on the server.

The vulnerability of the SAP Business Process Automation platform is related to the improper processing of address data received from users. Exploiting this vulnerability allows a malicious actor to view arbitrary files on the server, including system files, as well as gain access to critical...

The vulnerability of the software for processing data related to the software-hardware components of the SAP NetWeaver System Landscape Directory allows a hacker to obtain information about the internal network.

The vulnerability of the software for processing data related to the software and hardware components of the SAP NetWeaver system landscape directory is related to security vulnerabilities. Exploiting this vulnerability allows an attacker to obtain information about the internal network by scanni...