The vulnerability of the “ARM Relayer” and “Configurator” software components of the EKRASMS-SP suite of programs, related to the loading of a non-existent dynamic library, allows a violator to execute arbitrary code.

The vulnerability of the “ARM Relay Operator” and “Configurator” software components of the EKRASMS-SP suite lies in the loading of a nonexistent dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code using the specially crafted dynamic library...

Fengxing video pc client software has dll hijacking vulnerability

Fengxing Video pc client is a free video playback software, which is an integrated HD movie and TV viewing software for online viewing and downloading. Fengxing Video pc client software has a dll hijacking vulnerability, which can be exploited by attackers to inject executable DLL files and execu...

QQ Video pc client software suffers from dll hijacking vulnerability

QQ Video is a local player from Tencent that supports movie and music files in any format. QQ Video pc client software suffers from a dll hijacking vulnerability, which can be exploited by attackers to inject DLL files and execute arbitrary commands...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2019-41475)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS MX Series. The vulnerability originates from a...

EulerOS 2.0 SP5 : dhcp (EulerOS-SA-2019-2137)

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

NVIDIA Windows GPU Display Driver Code Execution Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A code execution vulnerability exists in the NVIDIA Control Panel of the NVIDIA Windows GPU Display Driver. The vulnerability stems from the NVIDIA control panel...

The vulnerability of the libaccess_realrtsp plugin of the media player software VideoLAN VLC, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libaccessrealrtsp plugin of the media player software VideoLAN VLC lies in buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the VideoLAN VLC media player software, related to buffer overflow in dynamic memory, allows a hacker to cause a system failure.

The vulnerability of the VideoLAN VLC media player lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Unspecified vulnerability in NVIDIA GeForce Experience local service provider component

NVIDIA Windows GPU Display Driver and NVIDIA GeForce Experience are both products of NVIDIA Corporation.NVIDIA Windows GPU Display Driver is a graphics processor GPU driver for the Windows platform. NVIDIA GeForce Experience is a set of automatic graphics card update tools. The product can...

Gartner Says the Future of Network Security Lies with SASE

Cloud services and networking are driving the concept of digital businesses, yet traditional networking and cybersecurity architectures are far from meeting the demands of the digital business. Gartner's "The Future of Network Security Is in the Cloud" report spells out the potential for the...

phpStudy has a dll hijacking vulnerability

phpStudy is a program integration package for PHP debugging environment. A dll hijacking vulnerability exists in phpStudy. An attacker can exploit the vulnerability to cause code execution...

CVE-2019-8139

A stored cross-site scripting XSS vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking page builder on a product...

Cross site scripting

A stored cross-site scripting XSS vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking page builder on a product...

elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64xlatetom in libelf/elf32xlatetom.c, due to dwflsegmentreportmodule not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to...

Apple iTunes Security Updates (HT210726)

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Apple macOS Catalina and Apple iTunes for Windows Dynamic Library Loading Vulnerability

Apple iTunes for Windows and Apple macOS Catalina are both products of Apple Inc. Apple iTunes for Windows is a Windows-based media player application. apple macOS Catalina is a specialized operating system developed for Mac computers. Apple macOS Catalina is a specialized operating system...

Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-27716 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0131, CVE-2019-0165, CVE-2019-0166, CVE-2019-0168, CVE-2019-0169, CVE-2019-11086, CVE-2019-11087,...

Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US

No description provided...

Dr. Memory - Memory Debugger For Windows, Linux, Mac, And Android

Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow, accesses to freed memory, double frees, memory leak...

Mitsubishi Electric smartRTU and Inea ME-RTU Password Plaintext Storage Vulnerability

Mitsubishi Electric smartRTU is an intelligent Remote Terminal Unit RTU from Mitsubishi Electric, Japan.Inea ME-RTU is an intelligent communication gateway product from Inea, Slovenia. A password plaintext storage vulnerability exists in Mitsubishi Electric smartRTU version 2.02 and earlier and...