CVE-2024-9484

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing...

CVE-2024-9484

CVE-2024-9484 affects AVG/Avast Antivirus on macOS due to a null-pointer-dereference in the engine module when processing malformed xar files. The issue, tied to signature

CVE-2024-9482

AVG/Avast Antivirus for macOS has an out-of-bounds write in the engine module triggered by malformed Mach-O files, potentially crashing the application during file processing. Affected are versions with signatures prior to 24092400. Remediation: update antivirus signature to 24092400 or later; as...

PT-2024-39660 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to signature 24092400 Description: A null-pointer-dereference issue in the engine module of AVG/Avast Antivirus on MacOS allows a malformed xar file to crash the application during file processing...

CVE-2024-9481: Out-of-bounds Write

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing...

CVE-2024-9482: Out-of-bounds Write

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing...

CVE-2024-9484: NULL Pointer Dereference

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from a mal-implementation issue found in the V8 module. No details of the vulnerability are provided at this time...

Liferay Portal and Liferay DXP Fails to Check Permissions

The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls...

CVE-2021-29052

The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls...

Extreme Office 1.0.1.30274 suffers from memory corruption vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office version 1.0.1.30274. The vulnerability is caused due to the failure of the loop body of a function in the core module...

Cisco ACE30 Application Control Engine Module and ACE 4710 Application Control Engine Denial of Service Vulnerabilities

Cisco ACE30 Application Control Engine Module and Cisco ACE 4710 Application Control Engine are both next-generation load balancing and application delivery solutions from Cisco. A denial of service vulnerability exists in the Cisco ACE30 Application Control Engine Module and Cisco ACE 4710...

CVE-2009-0625: Improper Control of Generation of Code

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18.0 allows remote attackers to cause a denial of service device reload via a crafted SNMPv3 packet...

CVE-2009-0624: Undefined Security Weakness

Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload v...

CVE-2009-0622: Undefined Security Weakness

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18a allows remote authenticated users to execute arbitrary operating-system commands through a command...

CVE-2009-0623: Undefined Security Weakness

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload via a crafted SSH packet...

CVE-2009-0620: Undefined Security Weakness

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

CVE-2006-4752: Undefined Security Weakness

Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter...