The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web pages, applications, or Microsoft Offi...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

CVE-2018-16236

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering...

Apache HTTP Server 'HTTP/2 connection' DoS Vulnerability

Apache HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Information disclosure

An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2018-14963)

iOS is a mobile operating system developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS due to a memory handling error in the WebKit component, which can be exploited by an attacker to execute arbitrary code on the target system...

DEBIAN-CVE-2018-5803

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "sctpmakechunk" function net/sctp/smmakechunk.c when handling SCTP packets length can be exploited to cause a kernel crash...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2018-10741)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server that stems from Exchange failing to properly...

RHEL 6 : chromium-browser (RHSA-2018:1195)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1195 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.117. Security Fixes:...

Microsoft Edge Arbitrary Code Execution Vulnerability (CNVD-2018-09476)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. An arbitrary code execution vulnerability exists in Microsoft Edge due to an object memory handling error in the browser, which can be exploited by an attacker to execute arbitrary code on the target system...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4011703)

This host is missing an important security update according to Microsoft KB4011703 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-03516)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

CVE-2017-13197

In the ihevcdparseslice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1...

Bento4 Denial of Service Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A denial of service vulnerability exists in the AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a denial of service by triggering a specially crafted MP4...

The vulnerability of the Click-to-Run software package from Microsoft Office allows a malicious actor to execute actions on the system with privileges of the current user.

The vulnerability of the Click-to-Run software package from Microsoft Office relates to improper handling of objects in memory, which leads to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute actions on the system with privileges of the current user, using a...

USN-3494-1 libxml-libxml-perl vulnerability

It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute arbitrary code...

CVE-2017-11878

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run...

QEMU Denial of Service Vulnerability (CNVD-2017-24371)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a denial of service vulnerability due to the program failing to properly clear pending packets. An attacker exploits the...

Microsoft Windows DirectX Elevation of Privilege Vulnerability

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is an operating system for personal computers and the latter is a server operating system.DirectX is one of the multimedia system libraries. An information disclosure vulnerability exists ...