PT-2019-3046 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the way the unistore.dll handles objects in memory, allowing an attacker to execute code with elevated permissions. A locally authenticated attacker could exploit th...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2019-22216)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows unistore.dll, which...

curl: SMTP end-of-response out-of-bounds read

An out-of-bounds read flaw was found in the way curl handled certain SMTP responses. A remote attacker could use this flaw to crash curl...

Microsoft Office Access Connectivity Engine Buffer Error Vulnerability (CNVD-2019-27305)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to gain access to protected information

The vulnerability of the Windows operating system’s kernel is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-14460)

Microsoft Jet Database Engine is an underlying database engine. A remote code execution vulnerability exists in Microsoft Jet Database Engine, which arises from the failure of Jet Database Engine to properly handle objects in memory, and can be exploited to execute arbitrary code on a victim's...

USN-3762-1 linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information kernel memory. CVE-2018-1118 Seunghun Han discovered an information leak in the ACPI handling code in the...

CVE-2018-7166

In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause Buffer.alloc to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying encoding can be passed as a number, this is...

USN-3708-1 openslp-dfsg vulnerabilities

It was discovered that OpenSLP incorrectly handled certain memory operations. A remote attacker could use this issue to cause OpenSLP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4071 advisory. - net: cdcether: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27841392 CVE-2017-16649 - sysctl: Drop reference added by grabheader in...

Microsoft Windows Internet Explorer scripting remote code execution vulnerability (CNVD-2018-00782)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.Internet Explorer IE is one of the browsers. scripting engine is one of the scripting engines. A remote code execution vulnerability exists in the scripting engine of IE 9, 10, and 11 in Microsoft...

The vulnerability of the Internet Explorer browser, related to improper handling of objects in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...

tcmu-runner invalid memory reference vulnerability

tcmu-runner is a daemon for handling the userspace side of the LIO TCM-User backstore. An invalid memory reference vulnerability exists in the handlerglfs.so handler in tcmu-runner versions 0.9.0-1.2.0. An attacker can exploit this vulnerability to cause a denial of service...

Huawei Enjoy 6 MTK Platform Arbitrary Memory Access Vulnerability (CNVD-2017-34227)

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. The Huawei Enjoy 6 MTK platform suffers from an arbitrary memory access vulnerability, which can be used by attackers to trick users into installing malicious apps, which can be exploited to send specific parameters leadin...

Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011276)

This host is missing an important security update according to Microsoft KB4011276 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

USN-3479-1 postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerabilities

David Rowley discovered that PostgreSQL incorrectly handled memory when processing certain JSON functions. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2017-15098 Dean Rasheed discovered that PostgreSQL incorrectly enforced SELECT privileges when processing...

PT-2017-4165 · Microsoft · Office 365 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2010 SP2 through 2016 Microsoft Office 365 affected versions not specified Description: The issue is related to the improper handling of objects in memory by Microsoft Outlook, allowing an attacker to execute...

CVE-2017-8692

The Windows Uniscribe component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote code execution vulnerability when it fails to properly handle objects in memory, aka "Uniscribe Remote Code...

Microsoft Windows Input Method Editor Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Input Method Editor IME is one of the input method editors. A remote code execution vulnerability exists in Input Method Editor in Microsoft Windows that stems from the program failing to properly...