CVE-2018-1000652

The CVE-2018-1000652 entry describes an XML External Entity (XXE) vulnerability in JabRef between versions up to 4.3.1, specifically in the MsBibImporter XML Parser. The flaw can lead to disclosure of confidential data, denial of service, server-side request forgery, and port scanning when proces...

CVE-2018-1000639

The CVE-2018-1000639 entry concerns LatexDraw versions

CVE-2018-1000652

JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This...

CVE-2018-1000651

CVE-2018-1000651 affects Stroom

See how I found the Yahoo XSSi vulnerability to achieve the user information stealing-vulnerability warning-the black bar safety net

! Find some specific categories of vulnerability is composed of two key parts, that is the vulnerability the cognitive as well as mining the degree of difficulty. Cross-site script contains a vulnerabilityXSSi in a recognized security standards OWASP TOP 10 and is not mentioned, but it is also no...

Intel CPU Foreshadow-NG (foreshadow next-generation version) Vulnerability

The L1 Terminal Malfunction OS/SMM vulnerability is different for Intel CPUs with SGX Software Protection Extensions technology, and may also affect CPUs from other vendors. With the speculative execution of a side-channel attack, an attacker with local user access could achieve an unauthorized...

PT-2018-3828 · Red Hat +4 · Elfutils +5

Name of the Vulnerable Software and Affected Versions: elfutils version 0.173 Description: The issue is related to a double free error in the libelf/elf end.c component of the elfutils utility, which is used for modifying and analyzing ELF binary files. This error can be exploited by a remote...

Adobe Flash Player Out-of-Bounds Read Vulnerability (CNVD-2018-18454)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An out-of-bounds read vulnerability exists in Adobe Flash Player. A remote attacker could exploit this vulnerabili...

CVE-2018-3620

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis...

CVE-2018-3646

CVE-2018-3646 is the L1 Terminal Fault (L1TF) vulnerability affecting systems with Intel CPUs. It allows a local attacker, including guests in virtualized environments, to read data from the L1 data cache via side-channel analysis. Apple’s Hypervisor entry ties this to speculative execution/guest...

DEBIAN-CVE-2018-14348

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...

FreeBSD-SA-18:09.l1tf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:09.l1tf Security Advisory The FreeBSD Project Topic: L1 Terminal Fault L1TF Kernel Information Disclosure Category: core Module: Kernel Announced: 2018-08-14...

Adobe Experience Manager server-side request forgery vulnerability (CNVD-2018-14949)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2017-1409

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 127396...

PT-2018-6278 · Sap · Sap Bpc

Name of the Vulnerable Software and Affected Versions: SAP BPC affected versions not specified Description: The issue concerns an XML external entity vulnerability in the reporting functionality. It can be triggered by a specially crafted XML request, leading to information disclosure and potenti...

SQL injection vulnerability in the li***.php page of the Leader Mailbox module of the SMiCMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the li.php page in the Leader Mailbox module of the State Micro CMS School CMS. An attacker can use the...

CVE-2016-8651

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image...

DEBIAN-CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...