Memory Out-of-Bounds Write Vulnerability in CAJ Reading Tool

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds write vulnerability exists in the CAJ reader tool when parsing malformed CAJ documents. The vulnerability is caused due to the program failing to properly handle incorrect...

Memory Out-of-Bounds Access Vulnerability in CAJ Reading Tool

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds access vulnerability exists in the CAJ Reader tool when parsing malformed CAJ documents. The vulnerability is due to the program using wild pointers for memory reads when...

Memory out-of-bounds access vulnerability in CAJ reading tool (CNVD-2019-19617)

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A memory out-of-bounds access vulnerability exists in the CAJ reader tool when parsing malformed CAJ documents. An attacker can exploit this vulnerability to cause a denial of service attack...

The vulnerability of the McAfee Agent client component, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code or cause service failure.

The vulnerability of the McAfee Agent client component is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending specially crafted HTTP requests...

Remote Code Execution (RCE)

ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-089...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882...

CVE-2019-11833

The CVE-2019-11833 vulnerability affects the ext4 filesystem implementation in the Linux kernel (extents.c) where the code path for an extent tree block does not zero out an unused memory region. This could allow a local attacker to read uninitialized kernel memory and disclose information. The i...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-18558

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that...

CVE-2018-18512

CVE-2018-18512 is a use-after-free vulnerability in Thunderbird triggered while playing a sound notification. The memory holding the sound data is freed while playback continues asynchronously, enabling potential crashes. Affected products: Thunderbird versions prior to 60.5. Root cause: use-afte...

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

KLA11735 Memory vulnerability in Opera

Memory vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Changelog for Opera 60 1https://blogs.opera.com/desktop/changelog-for-60/b3255.56 Changelog for Opera 60...

Xiaomi Mi6 Browser Out-of-Bounds Write Vulnerability

Xiaomi Mi6 Browser is a web browser from Xiaomi Technology Xiaomi, a Chinese company. An out-of-bounds write vulnerability exists in Xiaomi Mi6 Browser, which arises from a networked system or product that does not properly validate data boundaries when performing operations in memory, and can be...

CVE-2017-7777

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::readglyph function...

Remote code execution

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'...

CVE-2019-0859

CVE-2019-0859 (Windows Win32k Privilege Escalation) : A local privilege escalation vulnerability in the Win32k component of Microsoft Windows arises from Win32k failing to properly handle objects in memory, enabling an attacker to run code in kernel mode. Several connected sources corroborate thi...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

CVE-2019-0667

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0772...

Security Updates for Internet Explorer (March 2019)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability cou...