Arbitrary Code Execution

libass.so is vulnerable to arbitrary code execution. An integer overflow occurs during a call to outlinestroke that is made by assoutlineconstruct, potentially allowing an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

Fastjson is vulnerable to arbitrary code execution. A deserialization vulnerability exists within the JSON parser and allows the attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

mybatis is vulnerable to arbitrary code execution. Unsafe deserialization of object streams allow an attacker to execute arbitrary code on the host OS...

Insecure RDP

There are active attack campaigns as of October 2020 targeting RDP servers without multi-factor authentication enabled. Recent assessments: zeroSteiner at October 09, 2020 6:36pm UTC reported: Over the past couple of years 2018-2020 attacks against RDP have become more and more common. Recent...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

audiofile is vulnerable to arbitrary code execution. A heap-based buffer overflow in Expand3To4Module::run when running sfconvert allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

fontforge is vulnerable to arbitrary code execution. An out-of-bounds write in SFDGetFontMetaData function in sfd.c allows an attacker to execute arbitrary code on the host OS...

Remote Code Execution

LibVNCis vulnerable to remote code execution. A heap out-of-bound write vulnerability inside structure in the VNC client code allows an attacker to execute arbitrary code on the host OS remotely...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Memory safety bugs allows an attacker to corrupt memory and execute arbitrary code on the host OS...

CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Memory corruption in the application allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An allocation failure vulnerability in the function ReadMNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a small MNG file that has a MEND chunk with a large length value...