Linux kernel competitive conditions issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The kernel contains a Competitive Condition Problem vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually...

Multiple Apple Products CoreText Component Memory Misreference Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. coreText is one of the typography engines. CoreText is a typography engine. A memory misreference...

Google Android Information Disclosure Vulnerability (CNVD-2019-28876)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a networked system or product. An attacker could exploit th...

IBM DB2 Stack Buffer Overflow Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A stack-based buffer overflow vulnerability exists in IBM DB2 libdb2e.so.1, which originates when a...

Mozilla Thunderbird Code Issue Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation of a set of independent from MozillaApplicationSuite e-mail client software. The software supports IMAP and POP mail protocols as well as HTML mail format. A code issue vulnerability exists in versions of Mozilla Thunderbird prior to 60....

Google Android Privilege Permission and Access Control Vulnerability (CNVD-2020-35898)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in System in Google Android version 9, which stems from the lack of effective privilege permission and access control measures in a networked system or product. No...

Android Permission License and Access Control Vulnerability (CNVD-2019-09143)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in System in Android version 9, which stems from a lack of effective privilege permission and access control measures in a networked...

Android Permission License and Access Control Vulnerability (CNVD-2019-09144)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in System in Android, which arises from a lack of effective privilege permission and access control measures in a networked system o...

Android Permission License and Access Control Vulnerability (CNVD-2019-09145)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege-granting and access-control vulnerability exists in the Framework in Android version 8.0, which stems from a lack of effective privilege-granting and access-control measures in a...

Security for Connected Devices

With this post, I want to continue from earlier discussions on security posted here and here and focus on Connected Devices or the Internet of Things IoT. IoT typically represents a network of physical objects or “things” embedded with electronics, software, sensors, and connectivity to enable...

Clam AntiVirus Buffer Overflow Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer error vulnerability exists in Clam AntiVirus. The vulnerability originates when a networked system or product performs an operation on memory withou...

Arbitrary File Read Vulnerability in Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a networked office platform. Sancai Journal Acquisition and Editing System suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files...

Input Validation Vulnerability in Caret

Caret is a software package for plotting classification and regression models. An input validation vulnerability exists in versions of Caret prior to 2019-02-22 that originates from a networked system or product that does not properly validate incoming data. An attacker could exploit the...

Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is...

SQL Injection Vulnerability in Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

3 Reasons Your Business Needs Security at the Edge

As a security professional, no one knows better than you that the attack surface is shifting and continues to expand across an ever-widening area. Our interconnected digital lives are wreaking havoc with the idea of "the perimeter." As digital attacks continue to grow in size and volume, and are...

Eclipse OpenJ9 Input Validation Error Vulnerability

clipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. An input validation error vulnerability exists in Eclipse OpenJ9 version 0.11.0, which arises from a networked system or product that does not properly validate input...

CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is...

CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is...

Linux kernel number error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A numeric error vulnerability exists in versions of Linux kernel prior to 4.20.6, which arises from a networked system or product that does not properly compute or...