11758 matches found
CVE-2019-13960
In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...
CVE-2019-11720
Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...
The vulnerability of the Microsoft.NET Framework software platform, the Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management, is related to implementation errors in authentication procedures, which allow attackers to escalate their privileges.
The vulnerability of the Microsoft.NET Framework software platform, as well as the Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation email messaging software, is related to implementation errors in authentication procedures. Exploiting this...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Palo Alto Networks PAN-OS Information Disclosure Vulnerability (CNVD-2019-23068)
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An information disclosure vulnerability exists in Palo Alto Networks PAN-OS. to The vulnerability originates from an error in configuration or other errors in the operation of the network...
CVE-2019-13306
A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by...
Remote Code Execution (RCE)
fastjson is vulnerable to Remote Code Execution. The library has code logic errors that allow blacklist check bypass. An attacker is thus able to craft a malicious payload to execute arbitrary code during deserialization...
Fitbit activity-tracker information disclosure vulnerability
The Fitbit activity-tracker is a smart sports watch from the American company Fitbit. An information disclosure vulnerability exists in Fitbit activity-tracker. The vulnerability stems from errors such as configuration during operation of a networked system or product. An unauthorized attacker...
The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.
The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors when copying files using GFILECOPYALLMETADATA from admin:// to file:// URIs. Exploiting this vulnerability allows an...
The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to connect to the D-Bus server.
The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to authentication process errors. Exploiting this vulnerability could allow an attacker to gain access to the D-Bus server...
CVE-2018-7838
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FT...
CVE-2019-6824
A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...
CVE-2018-7838
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FT...
CVE-2019-6824
A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...
Buffer overflow
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FT...
Buffer overflow
A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...
CVE-2018-7838
CVE-2018-7838 affects Schneider Electric Modicon: Modicon M580 CPU (model BMEP582040) up to version V2.90 and Modicon Ethernet Module BMENOC0301 up to version V2.16. The vulnerability is a CWE-119 buffer error that can cause denial of service on the FTP service when the device processes a FTP CWD...