The vulnerability of Google Chrome’s Skia graphics library allows a hacker to execute memory-reading attacks beyond the application’s memory limits.

The vulnerability of Google Chrome’s Skia graphics library stems from numerical overflow. Exploiting this vulnerability allows a malicious actor to perform memory-wasting operations on an application by using a specially crafted HTML page...

The vulnerability of PDFium, the component responsible for rendering PDF documents in Google Chrome browsers, allows attackers to perform memory-reading operations beyond the limits of the application’s memory.

The vulnerability of PDFium, which is responsible for rendering PDF documents in Google Chrome browsers, is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to perform reading operations beyond the memory limit of the application, using a specially crafted...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to gain access to memory areas.

The vulnerability in the JavaScript V8 engine of Google Chrome browsers arises from performing operations beyond the bounds of memory buffers reading beyond the memory boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to memory areas through a specially crafted...

Cisco Prime Service Catalog SQL Injection Vulnerability

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco USA that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for computing, networking, storage, and other data center resources. A SQL injection...

CVE-2017-12342

A vulnerability in the Open Agent Container OAC feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature. An attacker could...

Huawei Reading App Arbitrary File Deletion Vulnerability

Huawei Read is the built-in mobile reading software for Huawei phones. The Huawei Reading App suffers from an arbitrary file deletion vulnerability, which is due to the software failing to adequately verify user-submitted input. An attacker could exploit the vulnerability to delete specific files...

CVE-2017-3157

By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user in...

CVE-2017-3157

CVE-2017-3157 affects Apache OpenOffice versions older than 4.1.4. The flaw arises in Calc/Writer when rendering embedded objects, enabling an attacker to craft a document that discloses files from the user’s filesystem (e.g., via hidden sections) and trick the user into saving/shipping the docum...

Ubuntu: Security Advisory (USN-3477-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...

readingterminalmarket.org XSS vulnerability

Open Bug Bounty ID: OBB-418117 Description| Value ---|--- Affected Website:| readingterminalmarket.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

[SECURITY] Fedora 26 Update: liblouis-2.6.2-12.fc26

Liblouis is an open-source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary brail le, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through...

[SECURITY] Fedora 27 Update: liblouis-2.6.2-12.fc27

Liblouis is an open-source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary brail le, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary Widget" component. It allows attackers to read local files if pasted text is used in a search...

fatcat - FAT Filesystems Explore, Extract, Repair, And Forensic Tool

This tool is designed to manipulate FAT filesystems, in order to explore, extract, repair, recover and forensic them. It currently supports FAT12, FAT16 and FAT32. Tutorials & examples Building and installing You can build fatcat this way: mkdir build cd build cmake .. make And then install it:...

CVE-2017-16762

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...

CVE-2017-16762

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...

CVE-2017-16661

Cacti 1.1.27 is affected by CVE-2017-16661 (arbitrary filesystem access) via a vulnerability where a remote authenticated administrator can set a private Log Path and request clog.php?filename= to read files (example /etc/passwd). The issue is part of a set of CVEs (including CVE-2017-16641, CVE-...

McAfee Network Data Loss Prevention server Man-in-the-Middle Attack Vulnerability

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from McAfee, Inc. in the United States. The software prevents unintentional or malicious disclosure of customer data, employee information and intellectual property information, as well as unauthorized...

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34150)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability wi...