PT-2018-14822 · FFmpeg · Libav

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is related to an invalid memory access in the vc1 decode frame function in libavcodec/vc1dec.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations...

Apple tvOS IOKit Memory Corruption Vulnerability

Apple tvOS is an operating system for Smart TVs from Apple Inc. in the U.S. IOKit is one of the components that reads system information. A security vulnerability exists in the IOKit component of Apple tvOS prior to version 12. An attacker can exploit this vulnerability to execute arbitrary code...

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2018-22525 )

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A SQL injection vulnerability exists in Zoho ManageEngine OpManager version 123222 prior to 12.3, which can be exploited by an attacker to obtain sensitive information about a database...

Unspecified Vulnerability in Green Electronics RainMachine Mini-8 and Touch HD 12 Web Applications (CNVD-2019-28247)

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application are both products of American c. Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler. touch HD 12 Web Touch HD 12 Web Application is a web-based touch screen application. A security vulnerability exists in the...

Libav Denial of Service Vulnerability (CNVD-2019-23073)

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A denial of service vulnerability exists in the 'ffvc1parseframeheaderadv' function of the vc1.c file in Libav version 12.3, which can be...

Apple macOS Denial of Service Vulnerability (CNVD-2018-22966)

macOS is Apple's proprietary operating system for the Mac line of products. A denial of service vulnerability exists in the Foundation component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability via a specially crafted text file to cause a denial ...

Apple macOS MediaRemote Security Bypass Vulnerability

Apple macOS Sierra is a suite of specialized operating systems developed by Apple for Mac computers. macOS High Sierra is its next generation. mediaRemote is one of the remote multimedia components. A security vulnerability exists in the MediaRemote component in Apple macOS Sierra version 10.12.6...

Apple macOS mDNSOffloadUserClient Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the mDNSOffloadUserClient component in Apple macOS Sierra version 10.12.6 and macOS High Sierra version 10.13.6. An attacker can exploit the vulnerability to execute...

Apple iOS IOHIDFamily Remote Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, of which IOHIDFamily is a kernel extension Abstract Interface for Human Interface Devices component. A security vulnerability exists in the IOHIDFamily component in Apple iOS versions prior to 12.1. An attacker can exploit th...

August 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4346082)

August 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4346082 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This article lists the Quality Rollups for .NE...

UBUNTU-CVE-2018-18829

There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...

UBUNTU-CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18517

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS...

Aryanic HighPortal Cross-Site Scripting Vulnerability

Aryanic HighPortal is an enterprise portal system based on Java and ASP.NET. A cross-site scripting vulnerability exists in Aryanic HighPortal version 12.5. A remote attacker can exploit this vulnerability by adding tags to inject arbitrary web script or HTML...

CVE-2018-3258

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

CVE-2018-3243

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: None. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-26721)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server component in Oracle MySQL, version 5.7.23 and earlier, and the Server: Optimizer subcomponent in...

Oracle MySQL Server Unauthorized Operation Vulnerability (CNVD-2018-21487)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server component in Oracle MySQL, version 5.7.23 and earlier, and the Server: Partition subcomponent in...

PT-2018-2434 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.23 and prior Oracle MySQL versions 8.0.12 and prior Description: The issue is related to insufficient access control in the InnoDB component of Oracle MySQL, allowing a high-privileged attacker with network access vi...

BlackBerry UEM Management Console Information Disclosure Vulnerability

BlackBerry UEM is a unified endpoint management solution from BlackBerry Canada. The solution is used to manage endpoint devices and view their access.Management Console is one of the management console programs. An information disclosure vulnerability exists in Management Console in BlackBerry U...