CVE-2018-19039

Grafana CVE-2018-19039 affects Grafana before 4.6.5 and 5.x before 5.3.3, allowing remote authenticated users with Editor or Admin perms to read arbitrary files. Root cause is a file-read exposure via dashboards/editors. Upgrading to Grafana 4.6.5 or 5.3.3+ mitigates the issue; check vendor advis...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12290)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-12872)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have an out-of-bounds read vulnerability. An attacker can exploit this vulnerability to obtain information...

UBUNTU-CVE-2018-18359

Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Adobe Acrobat and Reader suffer from a memory out-of-bounds read vulnerability (CNVD-2018-26525)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, remote attackers can us...

Adobe Acrobat and Reader suffer from a memory out-of-bounds read vulnerability (CNVD-2018-26527)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, remote attackers can us...

Security update for glib2 (moderate)

This update for glib2 fixes the following issues: Security issues fixed: - CVE-2018-16428: Do not do a NULL pointer dereference crash. Avoid that, at the cost of introducing a new translatable error message bsc1107121. - CVE-2018-16429: Fixed out-of-bounds read vulnerability...

CVE-2018-19748

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded note that base64 encoding, instead of URL encoding, is very rare in a...

Out-of-bounds

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

Huawei Cloud RDS service suffers from arbitrary file read vulnerability

Huawei Cloud RDS Service is a specialized high-performance and highly reliable cloud database service provided by Huawei Technologies Co. An arbitrary file read vulnerability exists in Huawei Cloud RDS Service, which can be exploited by an attacker to read arbitrary files...

Foxit Reader U3D Parsing Out-of-Bounds Read Vulnerability (CNVD-2018-25208)

Foxit Reader is China's Foxit Foxit Software Corporation of a PDF document reader. u3d plugin is one of the general 3D graphics format standard plug-ins. Foxit Reader 9.3.0.10826 version of the FoxitReader.exe file of the u3d plugin version 9.3.0.10809 security vulnerabilities. A remote attacker...

CVE-2018-19343

The u3d plugin 9.3.0.10809 aka plugins\U3DBrowser.fpi in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service out-of-bounds read, obtain sensitive information, or possibly have unspecified other impact via a U3D sample because of a "Data from Faulting...

Adobe Photoshop CC Information Disclosure Vulnerability (APSB18-28) - Mac OS X

Adobe Photoshop CC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

SUSE-SU-2018:3681-1 Security update for curl

This update for curl fixes the following issues: - CVE-2018-16840: A use-after-free in SASL handle close was fixed bsc1112758 - CVE-2018-16842: A Out-of-bounds Read in toolmsgs.c was fixed which could lead to crashes bsc1113660...

Apple macOS Out-of-Bounds Read Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. An out-of-bounds read vulnerability exists in the ATS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...

Apple macOS High Sierra Intel Graphics Driver Memory Read Vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS High Sierra version 10.13.6. The vulnerability can ...

Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...

Omron CX-Supervisor Out-of-Bounds Read Vulnerability

Omron CX-Supervisor is a visual machine controller from Omron Japan. An out-of-bounds read vulnerability exists in Omron CX-Supervisor 3.4.1.0 and earlier versions, which can be exploited by an attacker to force an application to read values outside of an array...