CVE-2019-6824

The CVE-2019-6824 entry concerns Schneider Electric ProClima prior to version 8.0.0, where a CWE-119 Buffer Overflow allows an unauthenticated, remote attacker to execute arbitrary code. Connected sources (ICS advisory ICSA-19-295-01 and CNVD-2019-23784) confirm the affected product, vulnerabilit...

CVE-2019-6824

A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

Storage Service Privilege Escalation

The vulnerability of the Storage Service component in Windows operating systems is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to increase their privileges...

Internet Explorer Script Handlers RCE

The vulnerability of Internet Explorer’s JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Internet Explorer Script Handlers RCE

The vulnerability of Internet Explorer’s JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page...

Microsoft Edge Script Handler RCE

The vulnerability of Microsoft Edge’s JavaScript script handler is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page...

Internet Explorer Script Handlers RCE

The vulnerability of Internet Explorer’s JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

browsers Internet Explorer and Unauthorized Access

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted web page...

Linux NFS DoS

The vulnerability of the NFS protocol implementation in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Python interpreter Syntax Analysis DoS

The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Moderate: Red Hat Security Advisory: openstack-tripleo-common security and bug fix update

An update for openstack-tripleo-common is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

PT-2019-2676

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows GDI component of Windows operating systems. This can allow an attacker to obtain unauthorized access ...

PT-2019-2699

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite API of Windows operating systems. This can allow an attacker to execute arbitrary code. Remote attackers may...

PT-2019-2698

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite API of Windows operating systems. This can allow an attacker to execute arbitrary code. Remote attackers may...

PT-2019-2701

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite API of Windows operating systems. This can allow an attacker to execute arbitrary code. Remote attackers may...

Linux kernel information disclosure vulnerability (CNVD-2019-23989)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in versions of Linux kernel prior to 5.1.7. The vulnerability arises from errors in configuration and other errors in th...