Design/Logic Flaw

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

CVE-2018-15998

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

CVE-2018-15987

Adobe Acrobat and Reader are affected by CVE-2018-15987 due to a buffer errors vulnerability in multiple versions: 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2017.011.30106 and earlier, 2017.011.30105 and earlier, 2015.006.30457 and earlier, and 2015.006.30456 and earlier. Successful...

CVE-2018-15987

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful...

CVE-2018-15998

CVE-2018-15998 affects Adobe Acrobat and Reader with a buffer errors vulnerability that could lead to arbitrary code execution. Publicly listed affected versions include 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2017.011.30106 and earlier, 2017.011.30105 and earlier, and 2015.006.30...

The vulnerability of the galsrv.exe process in the Enterprise Resource Management System “Galaktika ERP” allows a attacker to cause a service failure.

The vulnerability of the galsrv.exe process in the Enterprise Resource Management System “Galaktika ERP” is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures for DCOM-based technologies by quickly sending specially crafted...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution attacks. The vulnerability exists as the NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have...

Denial Of Service (DoS)

OpenStack Compute nova is vulnerable to denial of service DoS attack. It is possible because it does not restrict qemu-ing calls to consume as much as 4 GB of RAM on the compute host by uploading a malicious image, leading to out-of-memory errors and negatively affect other running tenant instanc...

Denial Of Service (DoS)

bind-dyndb-ldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the handleconnectionerror function in ldaphelper.c does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service through a non-alphabet character in the base DN in ...

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system allows a hacker to gain access to confidential information.

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted image file...

CVE-2018-1000872

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

Internet Bug Bounty: Use after free and out of bounds read in xmlrpc_decode()

Malformed input can lead to use after free and out of bounds memory errors. This has been fixed with the latest updates of PHP 7.1.26/7.2.14/7.3.1. Note: I reported those as separate bugs to PHP, but they had the same underlying bug and were fixed by the same commit. The release notes only mentio...

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system allows a hacker to redirect traffic to a malicious destination.

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to redirect traffic to a malicious destination remotely...

The vulnerability of the Filter Manager component of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the Filter Manager component of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code and gain control over the vulnerable system by deleting a specific file...

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a software for viewing electronic spreadsheets; the Microsoft Office and Office 365 products; the Microsoft Office Compatibility Pack; the Microsoft PowerPoint Viewer, a software for viewing presentations; the Microsoft Office Word Viewer, a software for reading documents; and the Microsoft Windows operating system. This vulnerability allows attackers to disclose protected information.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office programs and Office 365, the Microsoft Office Compatibility Pack, the Microsoft PowerPoint Viewer, the Microsoft Office Word Viewer, and the Microsoft Windows operating system is related to objec...

The vulnerability of the Device Guard component of the Windows operating system allows a hacker to inject arbitrary code into a Windows PowerShell session.

The vulnerability of the Device Guard component in the Windows operating system is related to security configuration errors. Exploiting this vulnerability could allow a local attacker to inject arbitrary code into the Windows PowerShell session...

The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

Vulnerability of the .NET Core runtime and PowerShell Core automation framework, related to authentication process errors, allowing attackers to disclose sensitive information

The vulnerability of the .NET Core runtime and the PowerShell Core automation framework is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software, related to authentication process errors, allows attackers to escalate their privileges.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using specially crafted HTTP requests...

The vulnerability of the Windows operating system, related to access privilege escalation errors, allows attackers to execute processes with elevated privileges.

The vulnerability of the Windows operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges through a specially created application...