554 matches found
ALPINE-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
Stack overflow
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
UBUNTU-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
Android - Binder Driver Use-After-Free
Android - Binder Driver Use-After-Free The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. ...
HTTP response splitting in WEBrick (Additional fix)
If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. This is the same issue as CVE-2017-17742. The previous fix was incomplete, which addressed the...
CVE-2019-11741
A compromised sandboxed content process can perform a Universal Cross-site Scripting UXSS attack on content from any site it can cause to be loaded in the same process. Because addons.mozilla.org and accounts.firefox.com have close ties to the Firefox product, malicious manipulation of these site...
TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31311)
The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2013 Update 5: July 9, 2019
None None...
Vulnerability of the components AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy, and SandboxDslScriptLoader.groovy, a Jenkins Job DSL plugin, allowing a malicious actor to execute arbitrary code
The vulnerabilities of components AbstractDslScriptLoader.groovy core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, and...
Emerson 396876-02-1 Isolated Resistance Temperature Device Detection
Binary data 756528.prm...
Entek XM-362 Isolated Temp. Module Specialty I/O
Binary data 754841.prm...
GE IC695ALG106 PACSystems RX3i Isolated Analog Input Detection
Binary data 755413.prm...
Rockwell Automation 1794 - 4 Channel 24V DC Non-Isolated Voltage/Current Analog Output 1794-OE4/A General Purpose Analog I/O
Binary data 752811.prm...
Emerson 396570-06-2 Non-isolated High Speed Counter Detection
Binary data 756515.prm...
Rockwell Automation 4-Channel Thermocouple/mV Isolated Input Module 1746-INT4 Analog I/O
Binary data 754022.prm...
Emerson 396568-01-7 Non-isolated Analog Input/Output module Detection
Binary data 756510.prm...