Cross site request forgery (csrf)

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents...

CVE-2019-16550

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents...

Microsoft Windows GDI Information Leakage Vulnerability (CNVD-2020-02185)

Microsoft Windows is a family of operating systems from Microsoft. An information leakage vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information through a variety of methods, including tricking a user into opening a specially crafted...

Microsoft Windows GDI Information Leakage Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. An information disclosure vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information in a variety of ways, including tricking a user into opening a specially crafted docume...

Important: thunderbird

Issue Overview: Several memory safety bugs were discovered in Mozilla Firefox and Thunderbird. Memory corruption and arbitrary code execution are possible with these vulnerabilities. These bugs can be exploited over the network.CVE-2019-11764 A flaw was discovered in both Firefox and Thunderbird...

Microsoft Excel Information Leakage Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted document files...

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2019-45917)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents

Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

Fedora Update for djvulibre FEDORA-2019-7fac263417

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Memory Corruption Vulnerability in iPubsoft PDF to TIFF Converter for Windows

iPubsoft PDF to TIFF Converter for Windows is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to TIFF Converter for Windows, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Memory Corruption Vulnerability in iPubsoft PDF to Text Converter

iPubsoft PDF to Text Converter is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to Text Converter, which can be exploited by attackers to crash the program by constructing malformed PDF files...

Memory Corruption Vulnerability in iPubsoft PDF Combiner

iPubsoft PDF Combiner is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF Combiner, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

CVE-2019-19496

Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

OWOX, Inc.: The URL in "Choose a data source'' at "https://bi.owox.com/ui/settings/connected-services/setup/" is not filtered => reflected XSS.

Hi team, This is another report with 732987. Because it is completely independent Detail -- In the process of selecting the data source at https://bi.owox.com/ui/settings/connected-services/setup/, I found a reflected XSS. Specifically, when you click on Google Analytics, a page will appear for y...

Mozilla: document.domain-based origin isolation has same-origin-property violation

A flaw was found in Mozilla's firefox and thunderbird where if two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This could cause an interaction between two...