Adobe Digital Editions Out-of-Bounds Memory Read Vulnerability (CNVD-2017-37096)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Digital Editions out-of-bounds memory read vulnerability (CNVD-2017-37097)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Digital Editions Out-of-Bounds Memory Read Vulnerability (CNVD-2017-37095)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36566)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36565)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability. Allow a remote attacker can exploit the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36595)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

CVE-2017-13801

CVE-2017-13801 affects macOS High Sierra before 10.13.1, specifically the Dictionary Widget. The vulnerability arises from a validation issue in the Dictionary Widget component that allows an attacker to read local files when pasted text is used as a search query. Impact is local information disc...

Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload

Web Viewer 1.0.0.193 Samsung SRN-1670D - Unrestricted File Upload Exploit Title: Unrestricted file upload vulnerability - Web Viewer 1.0.0.193 on Samsung SRN-1670D Date: 2017-06-19 Exploit Author: Omar MEZRAG - 0xFFFFFF / www.realistic-security.com Vendor Homepage: https://www.hanwhasecurity.com...

CVE-2017-2895

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...

Unrestricted file upload

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'networksslupload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the...

CVE-2017-16524

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'networksslupload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the...

CVE-2017-16524

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'networksslupload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the...

CVE-2017-3934

CVE-2017-3934 affects McAfee Network Data Loss Prevention (NDLP) server v9.3.x. The vulnerability is due to missing HTTP Strict Transport Security (HSTS) state, enabling MITM attackers to access confidential data by reading files on the web server. Descriptions in connected CNVD/NVD entries corro...

WordPress Job Manager Plugin File Read Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Job Manager is one of the task manager plugin. A file read vulnerability exists in versions of the WordPress Job...

CVE-2017-14327

CVE-2017-14327 affects Extreme EXOS 16.x, 21.x, and 22.x, exposing an arbitrary file read vulnerability. The issue allows an administrator (privileges required: HIGH) with local access to read restricted files (confidentiality impact: HIGH; integrity/availability: none). The CVSS vector indicates...

[SECURITY] [DLA 1111-1] weechat security update

Package : weechat Version : 0.3.8-1+deb7u3 CVE ID : CVE-2017-14727 Debian Bug : 876553 It was discovered that WeeChats logger plugin is vulnerable to an invalid buffer read which can be exploited remotely to trigger an application crash or other undefined behaviour. For Debian 7 "Wheezy", these...

FLIR Thermal Camera FFCPTD - Information Disclosure

FLIR Thermal Camera FFCPTD - Information Disclosure FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures Vendor: FLIR Systems, Inc. Product web page: http://www.flir.com Affected version: Firmware version: 8.0.0.64 Software version: 10.0.2.43 Release: 1.4.1, 1.4, 1.3.4 GA,...

CVE-2017-14643

The AP4HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4BytesToUInt32BE in Core/Ap4Utils.h...

CVE-2017-14633

CVE-2017-14633 : In Xiph.Org libvorbis 1.3.5, there is an out-of-bounds array read in mapping0_forward() of mapping0.c that may cause a denial of service when processing a crafted audio file with vorbis_analysis(). The issue is fixed upstream in libvorbis 1.3.6. Public advisories across distribut...

SUSE-SU-2017:2518-1 Security update for php5

This update for php5 fixes on issues. This security issue was fixed: - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...