The vulnerability of Google Chrome’s Blink rendering module allows a hacker to read data beyond the memory limit of the application.

The vulnerability of Google Chrome’s Blink engine is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to read data beyond the application’s memory boundary using a specially crafted HTML page...

The vulnerability of Google Chrome’s Skia graphics library allows a hacker to perform memory-reading operations beyond the limits of the application’s memory.

The vulnerability of Google Chrome’s Skia graphics library exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform memory-walking attacks using a specially crafted HTML page...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to execute read-out operations beyond the memory limit.

The vulnerability in the JavaScript V8 engine of Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform out-of-memory reading through a specially crafted HTML page...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to execute arbitrary code in an isolated environment.

The vulnerability of Google Chrome’s JavaScript V8 engine is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code in a isolated environment using a specially crafted HTML page...

H2O Denial of Service Vulnerability (CNVD-2018-01617)

H2O is a set of open source Web server software . A denial of service vulnerability exists in H2O 2.2.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted HTTP/1 packet header...

H2O Denial of Service Vulnerability (CNVD-2018-01620)

H2O is a set of open source Web server software . A denial of service vulnerability exists in H2O 2.2.3 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted HTTP/2 packet header...

httpd: mod_ssl NULL pointer dereference

A NULL pointer dereference flaw was found in the httpd's modssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request...

The vulnerability of Google Chrome browsers, related to the use of memory after it is freed, allows a hacker to perform reading beyond the buffer limit.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to perform reading beyond the buffer limit using a specially crafted HTML page...

undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests

It was discovered that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP...

Cisco Data Center Network Manager Software HTTP Injection Vulnerability

Cisco Data Center Network Manager DCNM Software is a data center management system from Cisco USA. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An HTTP injection vulnerability exists in the web interface in Cisco...

CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the...

DEBIAN-CVE-2017-2891

An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

Cisco Spark Hybrid Calendar Service Information Disclosure Vulnerability

The Cisco Spark Hybrid Calendar Service connects the local Microsoft Exchange calendar to the Cisco Spark cloud for installing meeting times. Cisco Spark Hybrid Calendar Service Information Disclosure Vulnerability. An unauthenticated, remote attacker views the unencrypted header information of a...

Google Chrome omnibox content spoofing vulnerability (CNVD-2017-33599)

Google Chrome for Mac, Windows and Linux is a web browser developed by Google for Mac, Windows and Linux platforms.Omnibox is one of the real-time search engines. A security vulnerability exists in Omnibox in Google Chrome on Linux, Windows and Mac platforms. A remote attacker can exploit this...

CVE-2017-5104

Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page...

UBUNTU-CVE-2017-5088

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

UBUNTU-CVE-2017-5117

Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

wget: Stack-based buffer overflow in HTTP protocol handling

A stack-based buffer overflow when processing chunked, encoded HTTP responses was found in wget. By tricking an unsuspecting user into connecting to a malicious HTTP server, an attacker could exploit this flaw to potentially execute arbitrary code...

chromium-browser: incorrect stack manipulation in webassembly

Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation...