PT-2018-16599

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue arises from a computation that reads data past the...

PT-2018-16592

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to computation that reads data past the...

PT-2018-16605

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue arises from a computation that reads data past the...

PT-2018-16610

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to computation that reads data past the...

PT-2018-16597

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to a computation that reads data past t...

PT-2018-16611

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to computation that reads data past the...

PT-2018-16588

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to a computation that reads data past t...

PT-2018-16619

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to computation that reads data past the...

PT-2018-16614

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to a computation that reads data past t...

PT-2018-16593

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2018.009.20050 and earlier Adobe Acrobat Reader versions 2017.011.30070 and earlier Adobe Acrobat Reader versions 2015.006.30394 and earlier Description The issue occurs due to computation that reads data past the...

PT-2018-5533

Name of the Vulnerable Software and Affected Versions: Android kernel Description: A information disclosure vulnerability exists in the Upstream kernel network driver, which may lead to sensitive data exposure. Recommendations: At the moment, there is no information about a newer version that...

CVE-2018-1000060: Insertion of Sensitive Information into Log File

Sensu, Inc. Sensu Core version Before 1.2.0 & before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b contains a CWE-522 vulnerability in Sensu::Utilities.redactsensitive that can result in sensitive configuration data e.g. passwords may be logged in clear-text. This attack appear to be exploitabl...

SQL Injection Vulnerability in CMS of Shanghai Seek Creative Technology Co.

Ltd. specializes in providing customers with high-end website planning, website construction, website design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the CMS of Shanghai Seek Creative Technology Co., Ltd, which can be...

SQL Injection Vulnerability in Website Construction System of Guangzhou Netsky Network Technology Co.

Guangzhou net days Network Technology Co., Ltd. long-term service in the Internet information technology high-tech positions, specializing in various industries in the enterprise company's e-commerce, website construction and website promotion corporate publicity, software development and other...

Worry-Free Shopping System ASP General Edition suffers from SQ Injection Vulnerability

Hassle-free shopping system ASP General Edition is a shopping site based on ASP/Access development of general management system set up. Worry-Free Shopping System ASP General Edition suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

What you didn’t know about OWASP Top-10 2017? Part 1/3

I hope everybody have already read the latest OWASP Top-10 list . Let me share some useful insights about it. First of all, OWASP Top-10 is NOT a vulnerability classification system. Rather it is a list of the most critical security risks for web application. What’s the difference? For example, t...

SQL Injection Vulnerability in XiaoCMS Backend Database.php Page

Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. A SQL injection vulnerability exists in the database.php page of XiaoCMS backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Friend's Home App Has Logic Design Flaws

Friends Home App is a social B&B platform based on acquaintance relationship. There is a logical design vulnerability in the Friend's Home APP, which can be exploited by an attacker to register arbitrary accounts and reset account passwords, leading to account abuse and consumption of service...

SQL Injection Vulnerability in DuxCms 3.0

DuxCms is a small and medium-sized website builder based on PHP+MYSQL and written in CANPHP framework. DuxCms 3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Yitianlian's Website Building System

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing professional network marketing services for enterprises. A SQL injection vulnerability exists in the Yitianlian Technology website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information ...