CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

Design/Logic Flaw

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this...

CVE-2018-18058

Bitdefender Engines prior to 7.76662 are affected by an input validation flaw in the iso.xmd parser that can trigger a division-by-zero, leading to Denial of Service when a user visits a malicious page or opens a crafted file. Multiple sources (NVD entry, Red Hat advisory, CVE listings) corrobora...

CVE-2018-18059

Bitdefender Engines prior to 7.76675 contain a vulnerability in the rar.xmd parser caused by insufficient validation of user-supplied data, leading to a read past the end of an allocated buffer. This weakness can contribute to a denial-of-service condition when exploited. Exploitation requires us...

CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

CVE-2018-18060

CVE-2018-18060 affects Bitdefender Engines prior to 7.76808. The vulnerability resides in the dalvik.xmd parser, arising from insufficient validation of user-supplied data, which can cause an out-of-bounds read in the parser and, when paired with other issues, may lead to denial-of-service. Explo...

CVE-2018-18060

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this...

Bitdefender Engines dalvik.xmd Parser Buffer Overflow Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the dalvik.xmd parser in Bitdefender Engines versions prior to 7.76808, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Bitdefender Engines iso.xmd Parser Out-of-Bounds Read Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the iso.xmd parser in Bitdefender Engines versions prior to 7.76662, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Bitdefender Engines rar.xmd Parser Out-of-Bounds Read Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the rar.xmd parser in Bitdefender Engines versions prior to 7.76675, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated attacker could exploit a flaw in the Storage Engines component to cause denial of service conditions...

Amazon Linux 2 : mariadb (ALAS-2019-1193)

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.CVE-2016-9843 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions th...

OPENSUSE-SU-2019:0251-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 60.5.1 fixes the following issues: Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 MFSA 2019-06 bsc1122983 bsc1119105 bsc1125330: - CVE-2018-18356: Fixed a Use-after-free in Skia. - CVE-2019-5785: Fixed an Integer overflow in Skia. -...

Intel Converged Security and Management Engine and Intel TXE Buffer Overflow Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

openSUSE Security Update : mariadb (openSUSE-2019-327)

This update for mariadb to version 10.2.22 fixes the following issues : Security issues fixed : - CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service bsc1122198. - CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to...

Goca Scanner - FOCA fork written in Go

Goca is a FOCA fork written in Go, which is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with Goca. It is capable of analyzing a wide variety of documents, with the most common being...

Vulnerability of the Server: Storage Engines component of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server: Storage Engines component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...