The vulnerability of the Azure App Services component of the Azure Stack software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure App Services component of the Azure Stack software platform exists due to errors in memory object processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the NT AUTHORITY/SYSTEM context remotely...

Sourcecodester Restaurant Management System Code Issue Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A code issue vulnerability exists in version 1.0 of the Sourcecodester Restaurant Management System, which arises from a failure of the program to properly process user-submitted input and can be exploited by an attack...

Adobe Acrobat Pro DC DST File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

Adobe Acrobat Pro DC DST File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object processing, allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Google Chrome, related to improper input validation, allows a malicious user to download a .desktop file that can execute arbitrary code.

The vulnerability of Google Chrome relates to errors during the processing of .desktop files in SafeBrowsing. Exploiting this vulnerability allows an attacker to download the .desktop file to execute arbitrary code...

CVE-2018-0389

A vulnerability in the implementation of Session Initiation Protocol SIP processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The vulnerability is du...

AdvanceCOMP Invalid Memory Access Vulnerability

AdvanceCOMP is a set of cross-platform command-line data compression tools. An invalid memory access vulnerability exists in the advpngunfilter8 function in png.c in AdvanceCOMP 2.1. An attacker can exploit this vulnerability to cause a denial of service segmentation error or possibly other impac...

The vulnerability of the AMF protocol processing mechanism in Cisco Secure ACS’s security access control system allows a perpetrator to execute arbitrary commands.

The vulnerability of the AMF processing mechanism in the Cisco Secure ACS security control system is related to deficiencies in input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted AMF message...

The vulnerability of the message filtering function of the Cisco AsyncOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco AsyncOS operating system’s message filtering function is related to insufficient processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted email message...

The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization software allows a intruder to gain access to control resources or execute arbitrary code.

The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization solution arises from incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain access to resources or execute arbitrary codes...

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-7166

In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause Buffer.alloc to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying encoding can be passed as a number, this is...

CVE-2018-7166: Sensitive Information in Resource Not Removed Before Reuse

In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause Buffer.alloc to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying encoding can be passed as a number, this is...

The vulnerability of the packet processing mechanism of Cisco Firepower 2100 Series software allows a intruder to trigger a service failure.

The vulnerability of the packet processing mechanism of Cisco Firepower 2100 Series microprogrammed network interface cards is related to uncontrolled resource consumption during the processing of IPv4 and IPv6 packets. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the Junos operating system, related to packet processing errors in CLNP, allows a attacker to execute arbitrary code or trigger a kernel error.

The vulnerability of the Junos operating system is related to errors in packet processing within the CLNP protocol. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a kernel error by using specially crafted CLNP packets...

CVE-2018-5146

An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code...

CVE-2018-6951

A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches...

The vulnerability of the ares_parse_naptr_reply function in the asynchronous DNS request library c-ares allows a attacker to perform reading beyond the buffer limit in memory.

The vulnerability of the aresparsenaptrreply function in the asynchronous DNS request library c-ares is related to incorrect data processing during the analysis of NAPTR responses. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger buffer overflow attacks by...

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...