CVE-2017-1130: Undefined Security Weakness

IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371...

meridianplaza.com XSS vulnerability

Open Bug Bounty ID: OBB-288983 Description| Value ---|--- Affected Website:| meridianplaza.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-13262

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface eonweb versions 5.1-0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the host list parameter to "module/tool all/select tool.php". This is due to the improper...

UBUNTU-CVE-2017-14106

The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service tcpselectwindow divide-by-zero error and system crash by triggering a disconnect within a certain tcprecvmsg code path...

CVE-2017-10120

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS...

PT-2017-11118

Name of the Vulnerable Software and Affected Versions Oracle Database Server version 12.1.0.2 Description The issue affects the RDBMS Security component of Oracle Database Server, allowing a high-privileged attacker with Create Session and Select Any Dictionary privileges to compromise RDBMS...

Fedora 24 : webkitgtk4 (2017-37f68e3534)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

PT-2017-19079

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript GhostXPS version 9.21 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, or possibly have other unspecified impacts via a crafted...

Sql injection

An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter...

Oracle Database Multiple Vulnerabilities (July 2017 CPU) (POODLE) (SWEET32)

The remote Oracle Database Server is missing the July 2017 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting...

PT-2017-13254

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12 Description The issue allows local users to cause a denial of service, resulting in a system crash due to a divide-by-zero error in the tcp select window function. This occurs when a disconnect is triggered...

Fedora 25 : webkitgtk4 (2017-bff1b87765)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

Vulnerability in core server (CVE-2017-7484)

selectivity estimators bypass SELECT privilege checks...

MariaDB Server 10.2.x < 10.2.4 Multiple DoS

Binary data 700000.prm...

MariaDB Server 10.1.x < 10.1.22 Multiple DoS

Binary data 9994.prm...

CVE-2017-5995

The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-5995

The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-5995

The CVE-2017-5995 entry concerns NetApp ONTAP Select Deploy administration utility versions 2.0–2.2.1. It indicates a remote information disclosure vulnerability via unspecified vectors, affecting the deployment utility component. The connected documents do not provide root cause analysis, concre...

CVE-2017-5995

The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...