gtbl document editing Pointer Arithmetic DoS

The vulnerability of the gtbl document editing tool from the groff package is related to errors in pointer manipulation at address 0x0000000000409400. Exploiting this vulnerability could allow an attacker to cause a service failure by passing a specially crafted file as an argument to the command...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

Cisco RV110W Wireless-N VPN Firewalls Device List Access

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

data tracking utility Peekfd Segmentation Error DoS

The vulnerability of the data tracking utility’s peekfd function is caused by segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

Microsoft Visual Studio Update Service Privilege Escalation

The vulnerability of the Microsoft Visual Studio software update service is related to privilege management errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files using a specially created application...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

Windows wlansvc.dll Code Execution

The vulnerability of the wlansvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created application...

Windows Audio Service Code Execution

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

dnsrslvr.dll RCE

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Cisco RV110W Wireless-N VPN Firewalls Web Management Access Information Disclosure

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2019-1718)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8324 - rubygems: Escape sequence injection vulnerability in gem...

Squid Security Update Advisory (SQUID-2018:4)

Squid is prone to a cross-site scripting vulnerability to incorrect input handling when generating HTTPS response messages about TLS errors. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

Microsoft.NET Framework Privilege Escalation

The vulnerability of the Microsoft.NET Framework software platform, as well as the Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation email messaging software, is related to implementation errors in authentication procedures. Exploiting this...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

DirectWrite Code Execution

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

DirectWrite Code Execution

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...