News aggregator

CVE-2018-10799

National Vulnerability Database - Tue, 05/08/2018 - 00:29
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT element.
Categories: Security News

Vuln: Microsoft Windows CVE-2017-11927 Information Disclosure Vulnerability

SecurityFocus Vulnerabilities - Tue, 05/08/2018 - 00:00
Microsoft Windows CVE-2017-11927 Information Disclosure Vulnerability
Categories: Security News

Vuln: Microsoft Internet Explorer VBScript Engine CVE-2018-8174 Arbitrary Code Execution Vulnerability

SecurityFocus Vulnerabilities - Tue, 05/08/2018 - 00:00
Microsoft Internet Explorer VBScript Engine CVE-2018-8174 Arbitrary Code Execution Vulnerability
Categories: Security News

CVE-2018-1256

National Vulnerability Database - Mon, 05/07/2018 - 12:22
Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan.
Categories: Security News

CVE-2018-10795

National Vulnerability Database - Mon, 05/07/2018 - 09:29
Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment via a browser/liferay/browser.html?Type= or html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html URI.
Categories: Security News

CVE-2018-1313

National Vulnerability Database - Mon, 05/07/2018 - 09:29
In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is successful. If the server is using a policy file, the policy file must permit the database location to be read for the attack to work. The default Derby Network Server policy file distributed with the affected releases includes a permissive policy as the default Network Server policy, which allows the attack to work.
Categories: Security News

CVE-2018-1413

National Vulnerability Database - Mon, 05/07/2018 - 09:29
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819.
Categories: Security News

CVE-2018-10773

National Vulnerability Database - Mon, 05/07/2018 - 03:29
NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by copac2xml.
Categories: Security News

CVE-2018-10774

National Vulnerability Database - Mon, 05/07/2018 - 03:29
Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by isi2xml.
Categories: Security News

CVE-2018-10775

National Vulnerability Database - Mon, 05/07/2018 - 03:29
NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by end2xml.
Categories: Security News

CVE-2018-10776

National Vulnerability Database - Mon, 05/07/2018 - 03:29
The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.
Categories: Security News

CVE-2018-10777

National Vulnerability Database - Mon, 05/07/2018 - 03:29
Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Categories: Security News

CVE-2018-10778

National Vulnerability Database - Mon, 05/07/2018 - 03:29
Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409.
Categories: Security News

CVE-2018-10779

National Vulnerability Database - Mon, 05/07/2018 - 03:29
TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
Categories: Security News

CVE-2018-10780

National Vulnerability Database - Mon, 05/07/2018 - 03:29
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.
Categories: Security News

Vuln: Linux Kernel CVE-2018-1108 Predictable Random Number Generator Weakness

SecurityFocus Vulnerabilities - Mon, 05/07/2018 - 00:00
Linux Kernel CVE-2018-1108 Predictable Random Number Generator Weakness
Categories: Security News

Vuln: LibTIFF CVE-2018-10779 Heap Based Buffer Overflow Vulnerability

SecurityFocus Vulnerabilities - Mon, 05/07/2018 - 00:00
LibTIFF CVE-2018-10779 Heap Based Buffer Overflow Vulnerability
Categories: Security News

CVE-2018-10771

National Vulnerability Database - Sun, 05/06/2018 - 22:29
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Categories: Security News

CVE-2018-10772

National Vulnerability Database - Sun, 05/06/2018 - 22:29
The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Categories: Security News

CVE-2018-10767

National Vulnerability Database - Sun, 05/06/2018 - 19:29
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.
Categories: Security News

Pages