freeFTPd Buffer Overflow Vulnerability

freeFTPd is an open source FTP File Transfer Protocol server. A buffer overflow vulnerability exists in freeFTPd version 1.0.8. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and wri...

Linux kernel buffer overflow vulnerability (CNVD-2019-46989)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the HID driver in versions of Linux kernel prior to 5.3.9. The vulnerability arises from a networked system or product that...

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra This document describes the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-27427)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge, which arises from the program failing to properly validate memory objects. An attacker could exploit the vulnerability to...

Net-SNMP Buffer Overflow Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A buffer overflow vulnerability exists in Net-SNMP version 5.8. The vulnerability originates when a network system or product...

MAPLE Computer WBT SNMP Administrator Remote Buffer Overflow Vulnerability

MAPLE WBT SNMP Administrator is a thin client management program. A buffer error vulnerability exists in the SnmpAdm.exe file in MAPLE WBT SNMP Administrator version v2.0.195.15. The vulnerability stems from a network system or product performing operations in memory without properly validating...

Linux/x86 - ASCII AND, SUB, PUSH, POPAD Encoder Shellcode

!/usr/bin/env python3 INTRODUCTION Encoder Title: ASCII shellcode encoder via AND, SUB, PUSH, POPAD Date: 26.6.2019 Encoder Author: Petr Javorik, www.mmquant.net Tested on: Linux ubuntu 3.13.0-32-generic, x86 Special thx to: Corelanc0d3r for intro to this technique Description: This encoder is...

Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2019-42731)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer error vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries,...

Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-16204)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A buffer overflow vulnerability exists in Microsoft IE 11. The vulnerability originates when a network system or product performs an operation in memory without proper...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-17525)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer error vulnerability...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-20379)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. The vulnerability originates when a networked system or product performs an operation in memory without properly validating dat...

Information Disclosure

byte is vulnerable to information disclosure through uninitialized buffers. The vulnerability exists due to the usage of Buffer which does not validate the memory is initialized, allowing information disclosure attacks to occur...

SUSE-SU-2018:0678-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks bsc1074562, bsc1068032 - CVE-2018-5683: The vgadrawtext function...

SUSE-SU-2018:0601-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks bsc1074562, bsc1068032 - CVE-2018-5683: The vgadrawtext function...

SUSE-SU-2018:0472-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks bsc1074562, bsc1068032 - CVE-2017-15595: x86 PV guest OS users were...

UBUNTU-CVE-2018-5683

The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service out-of-bounds read and QEMU process crash by leveraging improper memory address validation...

CVE-2017-11817: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly...

UBUNTU-CVE-2017-10918

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222...

Code injection

mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, a...

UBUNTU-CVE-2016-2486

mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, a...