CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3...

SUSE-SU-2019:2381-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed a double-free during kerberos FTP data transfer. bsc1149495 - CVE-2019-5482: Fixed a TFTP small block size heap buffer overflow bsc1149496...

Low: Red Hat Security Advisory: libwmf security update

An update for libwmf is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Use-After-Free

firefox is vulnerable to use-after-free. The vulnerability exists due to the manipulating video elements which allows an attacker to do a potentially exploitable crash in the application...

RHEL 7 : kernel (RHSA-2019:2696)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2696 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Memory corruption due to...

CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3...

KLA11550 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in...

MGASA-2019-0255 Updated irssi packages fix security vulnerability

Updated irssi packages fix security vulnerability: Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP CVE-2019-15717...

CVE-2019-14777

The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

SUSE-SU-2019:2232-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-195 fixes one issue. The following security issue was fixed: - CVE-2019-13233: Fixed use-after-free for access to an LDT entry caused by a race condition between modifyldt and a BR exception for an MPX bounds violation bsc1140454...

CVE-2019-15551

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

CVE-2019-8054

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2019-8025

CVE-2019-8025 is a use-after-free vulnerability in Adobe Acrobat and Adobe Reader affecting versions listed as 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is noted acr...

PT-2019-16218 · Google +7 · Android +7

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible double free in the ParseContentEncodingEntry function of mkvparser.cc due to a missing reset of a freed pointer. This could lead to remote code execution with no...

CVE-2019-15212

An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver...

CVE-2019-15151

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h...

Double free

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h...

CVE-2019-13514

Delta DOPSoft (Delta Industrial Automation) is affected by CVE-2019-13514 for versions 4.00.06.15 and earlier. The issue is a use-after-free in parsing a specially crafted project file, which may lead to information disclosure, remote code execution, or application crash. Exploitation details fro...

NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011)

The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or...