Archive
18 October 2018
Vulnerabilities first published on this day (UTC), newest first.
62 results · Feed
-
Unscored —
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the a…
-
Unscored —
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have…
-
Unscored —
In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when R…
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript t…
-
Unscored —
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for …
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply…
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
-
Unscored —
Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurri…
-
Unscored —
A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. …
-
Unscored —
The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers …
-
Unscored —
The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to ca…
-
Unscored —
The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL p…
-
Unscored —
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based…
-
Unscored —
CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based bu…
-
Unscored —
The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL p…
-
Unscored —
XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-adm…
-
Unscored —
The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NUL…