700 matches found
UBUNTU-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
Android - Binder Driver Use-After-Free
Android - Binder Driver Use-After-Free The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. ...
HTTP response splitting in WEBrick (Additional fix)
If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. This is the same issue as CVE-2017-17742. The previous fix was incomplete, which addressed the...
CVE-2019-11741
A compromised sandboxed content process can perform a Universal Cross-site Scripting UXSS attack on content from any site it can cause to be loaded in the same process. Because addons.mozilla.org and accounts.firefox.com have close ties to the Firefox product, malicious manipulation of these site...
TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31311)
The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2013 Update 5: July 9, 2019
None None...
Vulnerability of the components AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy, and SandboxDslScriptLoader.groovy, a Jenkins Job DSL plugin, allowing a malicious actor to execute arbitrary code
The vulnerabilities of components AbstractDslScriptLoader.groovy core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, and...
Rockwell Automation 1797-OE8H/B - 8 Channel Non-Isolated Analog HART Output General Purpose HART Analog I/O
Binary data 752855.prm...
Rockwell Automation 1794-OE8H/B - 8 Channel Non-Isolated Analog HART Output General Purpose HART Analog I/O
Binary data 752857.prm...
Rockwell Automation 1794 - 8 Point 120V AC Isolated Output 1794-OA8I/A General Purpose Discrete I/O
Binary data 752504.prm...
Emerson 396686-01-0 Isolated Vac Digital Input module Detection
Binary data 756524.prm...
GE IC695ALG112 PACSystems RX3i Isolated Analog Input Detection
Binary data 755414.prm...
Emerson 396983-02-2 Non-isolated Highway Addressable Remote Transducer Detection
Binary data 756532.prm...
Emerson 396572-04-9 Isolated Digital Output module Detection
Binary data 756507.prm...
Emerson 396603-01-7 Isolated Analog Output module Detection
Binary data 756518.prm...
Emerson 396572-02-2 Isolated Digital Output module Detection
Binary data 756506.prm...