PYSEC-2019-86

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's email address after case transformation of Unicode characters would allow an attacker to be sent a password reset token for the matched user...

CVE-2019-19844

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's email address after case transformation of Unicode characters would allow an attacker to be sent a password reset token for the matched user...

[SECURITY] [DLA 2042-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u8 CVE ID : CVE-2019-19844 Debian Bug : 946937 It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework. Djangos password-reset form used a case-insensitive query to retrieve...

CVE-2019-19844

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's email address after case transformation of Unicode characters would allow an attacker to be sent a password reset token for the matched user...

UBUNTU-CVE-2019-19844

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's email address after case transformation of Unicode characters would allow an attacker to be sent a password reset token for the matched user...

Nitro Software PDF Reader Null Pointer Dereference Vulnerability

Nitro Software PDF Reader is a suite of PDF document editors from Nitro Software, Inc. The product is mainly used to create, edit, view and convert PDF documents. Nitro Software PDF Reader 12.0.0.112 in the npdf.dll in the JBIG2Globals inventory in the...

CVE-2019-19818

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content...

CVE-2019-19818

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content...

Out-of-bounds

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content...

CVE-2019-19817

Affected software: Nitro Free PDF Reader 12.0.0.112. Component: JBIG2Decode in npdf.dll. Vulnerability: Out-of-Bounds Read via CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a triggered by crafted Unicode content. Impact (per CVSS): Availability impact HIGH; Confidentiality/Integrity NON...

CVE-2019-19817

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...

CVE-2019-19819

The CVE-2019-19819 issue affects Nitro Free PDF Reader 12.0.0.112, specifically the JBIG2Globals library (npdf.dll). A NULL Pointer Dereference in CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec can be triggered by crafted Unicode content, potentially causing a crash or denial of servic...

CVE-2019-19818

The CVE-2019-19818 entry concerns Nitro Free PDF Reader 12.0.0.112, specifically the JBIG2Decode library in npdf.dll. The vulnerability is an Out-of-Bounds Read in CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a triggered by crafted Unicode content. Affected component: JBIG2Decode in np...

CVE-2019-19818

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content...

PT-2019-4872

Name of the Vulnerable Software and Affected Versions Django versions prior to 1.11.27 Django versions 2.x prior to 2.2.9 Django versions 3.x prior to 3.0.1 Description The issue allows account takeover by sending a password reset token to an attacker for a matched user account. This occurs when ...

Windows Defender Antivirus 4.18.1908.7-0 File Extension Spoofing Vulnerability

David Haintz ======================================================================= title: File Extension Spoofing product: Windows Defender Antivirus vulnerable version: 4.18.1908.7-0 fixed version: Virus Definition Update of 2019/09/30 CVE number: - impact: High homepage:...

CVE-2018-6797

A heap buffer write overflow, with control over the bytes written, was found in the way regular expressions employing Unicode rules are compiled. An attacker, with the ability to provide a specially crafted regular expression, could crash the perl interpreter, or possibly execute arbitrary code...

Windows Defender Antivirus 4.18.1908.7-0 File Extension Spoofing

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: File Extension Spoofing product: Windows Defender Antivirus vulnerable version: 4.18.1908.7-0 fixed version: Virus Definition Update of 2019/09/30 CVE number: - impact:...

CVE-2019-2232

In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2232

In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...