Information disclosure

An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2018-14963)

iOS is a mobile operating system developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS due to a memory handling error in the WebKit component, which can be exploited by an attacker to execute arbitrary code on the target system...

DEBIAN-CVE-2018-5803

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "sctpmakechunk" function net/sctp/smmakechunk.c when handling SCTP packets length can be exploited to cause a kernel crash...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2018-10741)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server that stems from Exchange failing to properly...

RHEL 6 : chromium-browser (RHSA-2018:1195)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1195 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.117. Security Fixes:...

Microsoft Edge Arbitrary Code Execution Vulnerability (CNVD-2018-09476)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. An arbitrary code execution vulnerability exists in Microsoft Edge due to an object memory handling error in the browser, which can be exploited by an attacker to execute arbitrary code on the target system...

PT-2018-1895

Name of the Vulnerable Software and Affected Versions openslp-dfsg versions 1.0.2 through 1.1.0 Description The issue is related to memory handling errors. It may allow a remote attacker to execute arbitrary code or cause a denial-of-service. Recommendations For versions 1.0.2 through 1.1.0, at t...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-03516)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4011703)

This host is missing an important security update according to Microsoft KB4011703 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

CVE-2017-13197

In the ihevcdparseslice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1...

Bento4 Denial of Service Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A denial of service vulnerability exists in the AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a denial of service by triggering a specially crafted MP4...

The vulnerability of the Click-to-Run software package from Microsoft Office allows a malicious actor to execute actions on the system with privileges of the current user.

The vulnerability of the Click-to-Run software package from Microsoft Office relates to improper handling of objects in memory, which leads to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute actions on the system with privileges of the current user, using a...

USN-3494-1 libxml-libxml-perl vulnerability

It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute arbitrary code...

CVE-2017-11878

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run...

QEMU Denial of Service Vulnerability (CNVD-2017-24371)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a denial of service vulnerability due to the program failing to properly clear pending packets. An attacker exploits the...

Microsoft Windows DirectX Elevation of Privilege Vulnerability

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is an operating system for personal computers and the latter is a server operating system.DirectX is one of the multimedia system libraries. An information disclosure vulnerability exists ...

WordPress API Data Handling Error Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from an API data handling error vulnerability. An attacker can exploit this vulnerability to execute...

The vulnerability of the Perl interpreter, allowing attackers to inject arbitrary code

The vulnerability of the lc, lcfirst, uc, and ucfirst functions in the Perl interpreter is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security mechanisms and inject arbitrary code due to errors related to the improper use of the taint...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. This vulnerability allows attackers to execute arbitrary code or cause a service failure by accessing objects stored in memory in the context of the current user...